WEBVTT 00:00.080 --> 00:04.970 It takes a lot more than just technical know how to be a digital forensic investigator. 00:05.300 --> 00:10.850 There's a lot of research processes and analytics that also go into the case itself. 00:10.880 --> 00:14.210 Consider a scenario where you need to build a house. 00:14.240 --> 00:20.600 Sure, we need wood, nails, cement, metal, glass and all the other raw materials. 00:20.600 --> 00:26.630 And we also require the skilled laborers and contractors to construct the structure and piece it together. 00:26.810 --> 00:32.420 Apart from the materials, tools and resources, we would have also done our research to ensure that 00:32.420 --> 00:36.380 we understood what is needed for this to be a successful project. 00:36.410 --> 00:42.470 For instance, we would have had to obtain permits to build performed a soil analysis, considered the 00:42.470 --> 00:48.200 weather, and then chosen the types of materials based on the weather, location, soil type and so 00:48.200 --> 00:48.680 on. 00:48.710 --> 00:54.440 It goes without saying that there must be an understanding of fundamental concepts in the field in order 00:54.440 --> 00:56.590 to efficiently carry out the task. 00:56.600 --> 01:03.030 In the same way, we need to have an understanding of the file systems, operating systems, data types 01:03.030 --> 01:08.820 and locations, as well as a thorough understanding of the methods and procedures for preserving data 01:08.820 --> 01:11.220 storage, media and general evidence. 01:11.250 --> 01:14.560 In this lecture we will learn about the following topics. 01:14.580 --> 01:17.520 Asterisk The History of Storage Media. 01:17.730 --> 01:20.760 Asterisk File Systems and Operating Systems. 01:21.180 --> 01:21.870 Asterisk. 01:21.870 --> 01:23.010 What about the data? 01:23.730 --> 01:24.450 Asterisk. 01:24.450 --> 01:25.800 Data Volatility. 01:26.070 --> 01:27.030 Asterisk. 01:27.030 --> 01:30.420 The Paging file and its importance in digital forensics. 01:30.450 --> 01:32.550 The History of Storage Media. 01:32.670 --> 01:39.510 The end result of any investigation is to prove whether something exists or took place in laptops, 01:39.510 --> 01:42.750 desktops, mobile devices, and smart devices. 01:42.780 --> 01:46.680 Data has to be stored somewhere, even if it's just temporarily. 01:46.710 --> 01:54.570 Most of us may be familiar with hard disk drives within laptops, desktops, mobile devices and so on. 01:54.570 --> 01:59.070 But we also need to focus on removable and portable storage devices. 01:59.100 --> 02:06.150 These include DVDs, portable drives, thumb or flash drives, SD and microSD cards. 02:06.180 --> 02:10.500 Older media such as CDs and floppy disks and countless more. 02:10.860 --> 02:16.800 We should also consider that many portable flash drives come in many interesting shapes and sizes as 02:16.800 --> 02:22.380 novelty items and may not take the usual shape of the ordinary rectangular shaped drive. 02:22.770 --> 02:29.400 Another issue to consider is that many of these storage media devices have changed in size over the 02:29.400 --> 02:34.740 years and may be smaller in size usually as a result of evolving technology. 02:34.770 --> 02:41.100 Cloud storage has also cemented its place as a common and cost effective solution, with many companies 02:41.100 --> 02:48.090 offering free cloud storage solutions between 2GB and 15GB to the average user, with the option to 02:48.090 --> 02:49.470 pay for more storage. 02:49.560 --> 02:53.250 Although not a new concept, cloud storage is here to stay. 02:53.250 --> 02:59.280 And with it also comes some challenges to data recovery and forensics as we do not have access to the 02:59.280 --> 03:00.900 physical storage servers. 03:01.050 --> 03:07.670 Fortunat Lee Many cloud storage providers such as Google, Dropbox and Microsoft offer a service of 03:07.670 --> 03:14.240 temporarily holding deleted files in the event that they were mistakenly deleted or need to be recovered. 03:14.270 --> 03:17.060 IBM and the History of Storage Media. 03:17.090 --> 03:23.240 There can never be a story, journal book or even discussion on the history of hard drives and storage 03:23.240 --> 03:25.700 media without mentioning three letters. 03:25.730 --> 03:26.600 IBM. 03:26.810 --> 03:32.030 We're all familiar with this well known tech giant, but we might not all be familiar with some of its 03:32.030 --> 03:33.110 great achievements. 03:33.140 --> 03:35.180 International business machines. 03:35.210 --> 03:39.110 IBM, as we know it, has been around for quite some time. 03:39.260 --> 03:45.410 Known as the Computing-tabulating-recording Company CTR back in the early 1900s. 03:45.440 --> 03:52.730 IBM is better known for building the very first hard disk drive, the first PC, its servers, desktops 03:52.730 --> 03:58.130 and laptops between the years 1956 and 1957. 03:58.160 --> 04:05.040 IBM made major inroads with the development and release of the 305 random access method of accounting 04:05.040 --> 04:10.960 and control Ramac, which utilized the first disk storage technology. 04:10.980 --> 04:18.240 This revolutionary technology weighed in at approximately one ton and was roughly 16ft² in size. 04:18.270 --> 04:22.890 The disk space capacity of this behemoth, however, was only five megabytes. 04:22.890 --> 04:23.670 Megabytes? 04:23.670 --> 04:30.480 Yes, I said megabytes in size, although five megabytes by today's standard is roughly the size of 04:30.480 --> 04:33.410 a high definition photo taken with a mobile device. 04:33.420 --> 04:38.030 All things considered, this really was a monumental achievement for its time. 04:38.040 --> 04:43.860 Before IBM's invention, data was stored on punch cards, which could mount to as many as millions of 04:43.860 --> 04:46.350 cards just to hold a few megabytes. 04:46.740 --> 04:52.920 A major issue faced back then with the introduction of this digital storage was the size of the device. 04:53.100 --> 04:58.680 Transportation by plane and truck may not have been an option for many, and the space to store this 04:58.710 --> 04:59.550 would also have been. 04:59.580 --> 05:02.220 An issue as technology progressed. 05:02.250 --> 05:06.660 IBM announced a much more portable computer in 1975. 05:06.900 --> 05:12.420 Released as the IBM 5100 portable computer in the 1980s. 05:12.450 --> 05:17.790 Specifically, 1981, we saw the birth of the IBM personal computer. 05:17.970 --> 05:20.700 Weighing in at much less than its predecessor. 05:20.730 --> 05:28.680 This portable computer also had a much more affordable price tag of between $8000 and $20,000. 05:28.710 --> 05:36.120 It wasn't until 1981 when IBM released the first personal computer that the portability of computers 05:36.120 --> 05:42.690 was becoming an actual reality, with a price tag of $1,565. 05:42.720 --> 05:48.960 Owners were afforded a keyboard and mouse with options for a monitor printer and floppy drives. 05:49.320 --> 05:53.970 Apart from the floppy drives, this is the standard for today's personal computers. 05:54.150 --> 05:59.860 Along with this newer and more portable technology, there were also improvements in data storage media. 05:59.890 --> 06:05.710 Over the years, which saw advancements for magnetic tape storage, two floppy disks and diskettes, 06:05.740 --> 06:12.160 CDs, DVDs, Blu ray discs and of course, mechanical and solid state drives. 06:12.340 --> 06:13.180 SSDs.