Disk & Filesystem Forensics

Interpret synthetic filesystem clues: deleted names, inode times, mount options for safe analysis.

This room unlocks when you enrol in a linked course or have a matching Learn plan. No separate lab checkout — practice stays inside the track.