Online Live Training / Virtual Class

Date: 14-18 Sep. 2026, language: English
Course: File Systems Revealed, 5 days (8 hours each)     places available

Please note, this event is going to be the only File Systems Revealed class in 2026!

Course content

Modules:  
14 Sep. Basics and Partitioning (MBR, GPT, LVM2)
FAT12/FAT16/FAT32		 places available
15 Sep. exFAT and NTFS (Part 1) places available
16 Sep. NTFS (Part 2) places available
17 Sep. ext2/3/4 places available
18 Sep. XFS places available

Online class hours (including breaks):
US Eastern Time (UTC-4) not suitable
UTC 6:30 - 14:30
British/Irish Summer Time (UTC+1) 7:30 - 15:30
Central European Summer Time/South Africa Time (UTC+2) 8:30 - 16:30
Eastern European Summer Time (UTC+3) 9:30 - 17:30
Gulf Standard Time (UTC+4) 10:30 - 18:30
Thailand, Vietnam, W. Indonesia, ... (UTC+7) 13:30 - 21:30
China, HK, Taiwan, Malaysia, Singapore, Western Australia ... (UTC+8) 14:30 - 22:30
Japan, Korea (UTC+9) 15:30 - 23:30
Australian Eastern Standard Time (UTC+10) 16:30 - 00:30
New Zealand Standard Time (UTC+12) 18:30 - 02:30
Attendees in other time zones are also welcome. The main break will be after four hours and last 45 minutes.

Each individual course module for this training event needs to be confirmed by X-Ways. If the minimum number of attendees is reached, a module will be confirmed. If some modules are confirmed, and others are not, you will receive a refund for cancelled modules. If the entire event is not confirmed, you will receive a full refund. The decision is made no later than 7 days prior to the first day of class (usually earlier), and if you are signed up you will be notified immediately. Status right now: not yet decided

Attendees need to be approved by X-Ways. Please use your official e-mail account to book. Bookings or inquiries from freemail accounts will be accepted from known, established customers only. Please note our Rates & Terms.

To book the entire week, enter desired number of seats:
Government rate (be sure to use your official e-mail address)

To inquire about only booking selected days on this course, please contact us by e-mail at training@x-ways.com.

How it works: Attendees will connect via Zoom. Questions can be asked orally or in the chat window. All verbal and textual interchange is between all attendees and the instructor. You may be asked to share your screen with the instructor if you run into problems. To facilitate a virtual classroom environment more akin to that in a real one, course participants are asked to join the meeting with a webcam and microphone / headset, making them both visibly and audibly present in the course. X-Ways will not record the class. Participants are also asked to refrain from any voice or video recordings, for both copyright and privacy reasons.

Further details about required downloads (X-Ways Forensics software, images, training manuals, ...) will be provided in advance. Please make sure you will be undisturbed for the duration of the training!

Training provided by X-Ways Software Technology AG, Germany, the makers of WinHex and X-Ways Forensics.

Preconditions: You already have a working knowledge of computer forensics in general and know your way around X-Ways Forensics. This course uses X-Ways Forensics to examine the underlying structures of file systems and partitioning schemes, but does not deal with the use of the product as such, except the first module which includes an introduction to navigating offsets and sectors in raw data, employing the Data Interpreter and templates to view dates and numbers from the raw hex data. Attendees without a solid unterstanding of how to use the Data Interpreter and templates, are definitely recommended to attend the first module of this course, as all subsequent modules will simply assume this as given.

Important: You need to use your own computer running Windows 7 or newer. You need to be connected to the Internet. Ideally you will use 2 computers or 2 screens, one for the presentation and one to run the application. A headset would be perfect to have so that you can give spontaneous oral feedback and ask questions, and do not transmit ambient noise as an ordinary webcam microphone would. We offer a temporary license for X-Ways Forensics with BYOD or BYOD+ for the duration of the class in case you don't have a dongle at hand.