1
00:00:00,080 --> 00:00:04,970
It takes a lot more than just technical know how to be a digital forensic investigator.

2
00:00:05,300 --> 00:00:10,850
There's a lot of research processes and analytics that also go into the case itself.

3
00:00:10,880 --> 00:00:14,210
Consider a scenario where you need to build a house.

4
00:00:14,240 --> 00:00:20,600
Sure, we need wood, nails, cement, metal, glass and all the other raw materials.

5
00:00:20,600 --> 00:00:26,630
And we also require the skilled laborers and contractors to construct the structure and piece it together.

6
00:00:26,810 --> 00:00:32,420
Apart from the materials, tools and resources, we would have also done our research to ensure that

7
00:00:32,420 --> 00:00:36,380
we understood what is needed for this to be a successful project.

8
00:00:36,410 --> 00:00:42,470
For instance, we would have had to obtain permits to build performed a soil analysis, considered the

9
00:00:42,470 --> 00:00:48,200
weather, and then chosen the types of materials based on the weather, location, soil type and so

10
00:00:48,200 --> 00:00:48,680
on.

11
00:00:48,710 --> 00:00:54,440
It goes without saying that there must be an understanding of fundamental concepts in the field in order

12
00:00:54,440 --> 00:00:56,590
to efficiently carry out the task.

13
00:00:56,600 --> 00:01:03,030
In the same way, we need to have an understanding of the file systems, operating systems, data types

14
00:01:03,030 --> 00:01:08,820
and locations, as well as a thorough understanding of the methods and procedures for preserving data

15
00:01:08,820 --> 00:01:11,220
storage, media and general evidence.

16
00:01:11,250 --> 00:01:14,560
In this lecture we will learn about the following topics.

17
00:01:14,580 --> 00:01:17,520
Asterisk The History of Storage Media.

18
00:01:17,730 --> 00:01:20,760
Asterisk File Systems and Operating Systems.

19
00:01:21,180 --> 00:01:21,870
Asterisk.

20
00:01:21,870 --> 00:01:23,010
What about the data?

21
00:01:23,730 --> 00:01:24,450
Asterisk.

22
00:01:24,450 --> 00:01:25,800
Data Volatility.

23
00:01:26,070 --> 00:01:27,030
Asterisk.

24
00:01:27,030 --> 00:01:30,420
The Paging file and its importance in digital forensics.

25
00:01:30,450 --> 00:01:32,550
The History of Storage Media.

26
00:01:32,670 --> 00:01:39,510
The end result of any investigation is to prove whether something exists or took place in laptops,

27
00:01:39,510 --> 00:01:42,750
desktops, mobile devices, and smart devices.

28
00:01:42,780 --> 00:01:46,680
Data has to be stored somewhere, even if it's just temporarily.

29
00:01:46,710 --> 00:01:54,570
Most of us may be familiar with hard disk drives within laptops, desktops, mobile devices and so on.

30
00:01:54,570 --> 00:01:59,070
But we also need to focus on removable and portable storage devices.

31
00:01:59,100 --> 00:02:06,150
These include DVDs, portable drives, thumb or flash drives, SD and microSD cards.

32
00:02:06,180 --> 00:02:10,500
Older media such as CDs and floppy disks and countless more.

33
00:02:10,860 --> 00:02:16,800
We should also consider that many portable flash drives come in many interesting shapes and sizes as

34
00:02:16,800 --> 00:02:22,380
novelty items and may not take the usual shape of the ordinary rectangular shaped drive.

35
00:02:22,770 --> 00:02:29,400
Another issue to consider is that many of these storage media devices have changed in size over the

36
00:02:29,400 --> 00:02:34,740
years and may be smaller in size usually as a result of evolving technology.

37
00:02:34,770 --> 00:02:41,100
Cloud storage has also cemented its place as a common and cost effective solution, with many companies

38
00:02:41,100 --> 00:02:48,090
offering free cloud storage solutions between 2GB and 15GB to the average user, with the option to

39
00:02:48,090 --> 00:02:49,470
pay for more storage.

40
00:02:49,560 --> 00:02:53,250
Although not a new concept, cloud storage is here to stay.

41
00:02:53,250 --> 00:02:59,280
And with it also comes some challenges to data recovery and forensics as we do not have access to the

42
00:02:59,280 --> 00:03:00,900
physical storage servers.

43
00:03:01,050 --> 00:03:07,670
Fortunat Lee Many cloud storage providers such as Google, Dropbox and Microsoft offer a service of

44
00:03:07,670 --> 00:03:14,240
temporarily holding deleted files in the event that they were mistakenly deleted or need to be recovered.

45
00:03:14,270 --> 00:03:17,060
IBM and the History of Storage Media.

46
00:03:17,090 --> 00:03:23,240
There can never be a story, journal book or even discussion on the history of hard drives and storage

47
00:03:23,240 --> 00:03:25,700
media without mentioning three letters.

48
00:03:25,730 --> 00:03:26,600
IBM.

49
00:03:26,810 --> 00:03:32,030
We're all familiar with this well known tech giant, but we might not all be familiar with some of its

50
00:03:32,030 --> 00:03:33,110
great achievements.

51
00:03:33,140 --> 00:03:35,180
International business machines.

52
00:03:35,210 --> 00:03:39,110
IBM, as we know it, has been around for quite some time.

53
00:03:39,260 --> 00:03:45,410
Known as the Computing-tabulating-recording Company CTR back in the early 1900s.

54
00:03:45,440 --> 00:03:52,730
IBM is better known for building the very first hard disk drive, the first PC, its servers, desktops

55
00:03:52,730 --> 00:03:58,130
and laptops between the years 1956 and 1957.

56
00:03:58,160 --> 00:04:05,040
IBM made major inroads with the development and release of the 305 random access method of accounting

57
00:04:05,040 --> 00:04:10,960
and control Ramac, which utilized the first disk storage technology.

58
00:04:10,980 --> 00:04:18,240
This revolutionary technology weighed in at approximately one ton and was roughly 16ft² in size.

59
00:04:18,270 --> 00:04:22,890
The disk space capacity of this behemoth, however, was only five megabytes.

60
00:04:22,890 --> 00:04:23,670
Megabytes?

61
00:04:23,670 --> 00:04:30,480
Yes, I said megabytes in size, although five megabytes by today's standard is roughly the size of

62
00:04:30,480 --> 00:04:33,410
a high definition photo taken with a mobile device.

63
00:04:33,420 --> 00:04:38,030
All things considered, this really was a monumental achievement for its time.

64
00:04:38,040 --> 00:04:43,860
Before IBM's invention, data was stored on punch cards, which could mount to as many as millions of

65
00:04:43,860 --> 00:04:46,350
cards just to hold a few megabytes.

66
00:04:46,740 --> 00:04:52,920
A major issue faced back then with the introduction of this digital storage was the size of the device.

67
00:04:53,100 --> 00:04:58,680
Transportation by plane and truck may not have been an option for many, and the space to store this

68
00:04:58,710 --> 00:04:59,550
would also have been.

69
00:04:59,580 --> 00:05:02,220
An issue as technology progressed.

70
00:05:02,250 --> 00:05:06,660
IBM announced a much more portable computer in 1975.

71
00:05:06,900 --> 00:05:12,420
Released as the IBM 5100 portable computer in the 1980s.

72
00:05:12,450 --> 00:05:17,790
Specifically, 1981, we saw the birth of the IBM personal computer.

73
00:05:17,970 --> 00:05:20,700
Weighing in at much less than its predecessor.

74
00:05:20,730 --> 00:05:28,680
This portable computer also had a much more affordable price tag of between $8000 and $20,000.

75
00:05:28,710 --> 00:05:36,120
It wasn't until 1981 when IBM released the first personal computer that the portability of computers

76
00:05:36,120 --> 00:05:42,690
was becoming an actual reality, with a price tag of $1,565.

77
00:05:42,720 --> 00:05:48,960
Owners were afforded a keyboard and mouse with options for a monitor printer and floppy drives.

78
00:05:49,320 --> 00:05:53,970
Apart from the floppy drives, this is the standard for today's personal computers.

79
00:05:54,150 --> 00:05:59,860
Along with this newer and more portable technology, there were also improvements in data storage media.

80
00:05:59,890 --> 00:06:05,710
Over the years, which saw advancements for magnetic tape storage, two floppy disks and diskettes,

81
00:06:05,740 --> 00:06:12,160
CDs, DVDs, Blu ray discs and of course, mechanical and solid state drives.

82
00:06:12,340 --> 00:06:13,180
SSDs.