Full lesson	Create for a teacher a set of content for giving a lesson, beginning with the lesson plan. Each new block of materials must begin with an H1 heading (other subheaders must be H2, H3, etc). When you describe required pictures, write those descriptions in curly brackets, for example: {A picture of a triangle}
Which subject	Computer science
What topic	Digital forensics - ntds filesysytem
What length (min)	30
What age group	Adult courses
Class size	20
What curriculum
Include full script
Check previous homework
Ask some students to presents their homework
Add a physical break
Add group activities
Include homework
Show correct answers
Prepare slide templates
Number of slides	5
Create fill-in cards for students
Create creative backup tasks for unexpected moments

Lesson plan

Topic

Digital Forensics - NTDS Filesystem

Objectives

• Understand the concept and importance of digital forensics.
• Grasp the structure and functionality of the NTDS filesystem.
• Learn how to conduct an analysis of NTDS files as a part of digital forensic investigations.

Materials

• Projector and screen for presentations
• Whiteboard and markers
• Access to incident response tools (for demonstration purposes)
• Sample NTDS files (digital copies)
• Handouts summarizing key concepts

Grade/Age Group

Adult Courses

Subject

Computer Science

Class Size

20 Students

Lesson Structure

Step Number	Step Title	Length (mins)	Details
1	Introduction to Digital Forensics	5	Introduce the topic. Discuss the importance of digital forensics in modern cybersecurity.
2	Overview of NTDS Filesystem	10	Explain the NTDS filesystem, its structure, and its purpose in Windows environments. Highlight how NTDS files are used in Active Directory.
3	Investigating NTDS Files	10	Demonstrate how to analyze NTDS files. Use sample files for a live demonstration of the analysis process. Discuss the tools typically used for this purpose.
4	Discussion and Q&A	5	Open floor for student questions and clarifications about the material covered. Encourage dialogue.
5	Homework Assignment	0	Briefly explain the homework task: analyze a provided sample NTDS file and prepare a written report summarizing findings. Explain that reports will be collected but not presented in class.

Assessment

• Students will submit a written report on their homework assignment.
• Participation in the discussion will be considered in the overall assessment.

Homework

• Analyze a provided sample NTDS file and prepare a written report summarizing findings. The reports will be checked without requiring students to present their findings in front of the class.

National Curriculum Alignment

• This lesson corresponds to the national curriculum requirements for Computer Science focusing on cybersecurity, data analysis, and digital forensics practices.

Additional Notes

• Ensure all materials are prepared and accessible prior to the lesson.
• Encourage inclusive participation from all students during the discussion and Q&A segment.

Lesson script