diff --git a/FSCS727_Forensics/PPT/Introduction to Hyper-V on Windows 10 _ Microsoft Docs.pdf b/FSCS727_Forensics/PPT/Introduction to Hyper-V on Windows 10 _ Microsoft Docs.pdf
new file mode 100644
index 0000000..53cfda6
Binary files /dev/null and b/FSCS727_Forensics/PPT/Introduction to Hyper-V on Windows 10 _ Microsoft Docs.pdf differ
diff --git a/FSCS727_Forensics/PPT/chap05/1_Analysis of a USB storage device-FAT.pptx b/FSCS727_Forensics/PPT/chap05/1_Analysis of a USB storage device-FAT.pptx
new file mode 100644
index 0000000..0273c80
Binary files /dev/null and b/FSCS727_Forensics/PPT/chap05/1_Analysis of a USB storage device-FAT.pptx differ
diff --git a/FSCS727_Forensics/PPT/chap05/2_New Technology File System_NTFS_.pptx b/FSCS727_Forensics/PPT/chap05/2_New Technology File System_NTFS_.pptx
new file mode 100644
index 0000000..5bbc6cd
Binary files /dev/null and b/FSCS727_Forensics/PPT/chap05/2_New Technology File System_NTFS_.pptx differ
diff --git a/FSCS727_Forensics/PPT/chap05/3_Window_Registry.pptx b/FSCS727_Forensics/PPT/chap05/3_Window_Registry.pptx
new file mode 100644
index 0000000..530c177
Binary files /dev/null and b/FSCS727_Forensics/PPT/chap05/3_Window_Registry.pptx differ
diff --git a/FSCS727_Forensics/PPT/chap05/4_Optional_Window Registry_Intro.pptx b/FSCS727_Forensics/PPT/chap05/4_Optional_Window Registry_Intro.pptx
new file mode 100644
index 0000000..dad21b9
Binary files /dev/null and b/FSCS727_Forensics/PPT/chap05/4_Optional_Window Registry_Intro.pptx differ
diff --git a/FSCS727_Forensics/PPT/chap05/5_Optional_Windows_Registry_ Extra.pptx b/FSCS727_Forensics/PPT/chap05/5_Optional_Windows_Registry_ Extra.pptx
new file mode 100644
index 0000000..6a7373d
Binary files /dev/null and b/FSCS727_Forensics/PPT/chap05/5_Optional_Windows_Registry_ Extra.pptx differ
diff --git a/FSCS727_Forensics/PPT/chap05/FAT_cheatsheet.pdf b/FSCS727_Forensics/PPT/chap05/FAT_cheatsheet.pdf
new file mode 100644
index 0000000..bab3113
Binary files /dev/null and b/FSCS727_Forensics/PPT/chap05/FAT_cheatsheet.pdf differ
diff --git a/FSCS727_Forensics/PPT/chap05/FileSystem.ppt b/FSCS727_Forensics/PPT/chap05/FileSystem.ppt
new file mode 100644
index 0000000..336f3d3
Binary files /dev/null and b/FSCS727_Forensics/PPT/chap05/FileSystem.ppt differ
diff --git a/FSCS727_Forensics/PPT/chap05/FileSystem_Intro.pdf b/FSCS727_Forensics/PPT/chap05/FileSystem_Intro.pdf
new file mode 100644
index 0000000..ee3f36e
Binary files /dev/null and b/FSCS727_Forensics/PPT/chap05/FileSystem_Intro.pdf differ
diff --git a/FSCS727_Forensics/PPT/chap05/Share Files & Folders Between Your Host Machine.pptx b/FSCS727_Forensics/PPT/chap05/Share Files & Folders Between Your Host Machine.pptx
new file mode 100644
index 0000000..6b5c6b9
Binary files /dev/null and b/FSCS727_Forensics/PPT/chap05/Share Files & Folders Between Your Host Machine.pptx differ
diff --git a/FSCS727_Forensics/PPT/chap05/Understanding_ect_shadow_file.pptx b/FSCS727_Forensics/PPT/chap05/Understanding_ect_shadow_file.pptx
new file mode 100644
index 0000000..07746d2
Binary files /dev/null and b/FSCS727_Forensics/PPT/chap05/Understanding_ect_shadow_file.pptx differ
diff --git a/FSCS727_Forensics/PPT/chap05/WindowRegistry.pptx b/FSCS727_Forensics/PPT/chap05/WindowRegistry.pptx
new file mode 100644
index 0000000..81b71b2
Binary files /dev/null and b/FSCS727_Forensics/PPT/chap05/WindowRegistry.pptx differ
diff --git a/FSCS727_Forensics/PPT/chap05/a583014.pdf b/FSCS727_Forensics/PPT/chap05/a583014.pdf
new file mode 100644
index 0000000..835dba1
Binary files /dev/null and b/FSCS727_Forensics/PPT/chap05/a583014.pdf differ
diff --git a/FSCS727_Forensics/PPT/chap05/book_info_file_system_forensic_analysis.pdf b/FSCS727_Forensics/PPT/chap05/book_info_file_system_forensic_analysis.pdf
new file mode 100644
index 0000000..378e417
Binary files /dev/null and b/FSCS727_Forensics/PPT/chap05/book_info_file_system_forensic_analysis.pdf differ
diff --git a/FSCS727_Forensics/PPT/chap05/filesystem.pdf b/FSCS727_Forensics/PPT/chap05/filesystem.pdf
new file mode 100644
index 0000000..22186ca
Binary files /dev/null and b/FSCS727_Forensics/PPT/chap05/filesystem.pdf differ
diff --git a/FSCS727_Forensics/PPT/chap05/wireless-networks-windows-registry-computer-been-33659.pdf b/FSCS727_Forensics/PPT/chap05/wireless-networks-windows-registry-computer-been-33659.pdf
new file mode 100644
index 0000000..9cf4cfd
Binary files /dev/null and b/FSCS727_Forensics/PPT/chap05/wireless-networks-windows-registry-computer-been-33659.pdf differ
diff --git a/FSCS727_Forensics/PPT/chap05/~$1_Analysis of a USB storage device-FAT.pptx b/FSCS727_Forensics/PPT/chap05/~$1_Analysis of a USB storage device-FAT.pptx
new file mode 100644
index 0000000..1366957
Binary files /dev/null and b/FSCS727_Forensics/PPT/chap05/~$1_Analysis of a USB storage device-FAT.pptx differ
diff --git a/FSCS727_Forensics/PPT/chap05/~$2_New Technology File System_NTFS_.pptx b/FSCS727_Forensics/PPT/chap05/~$2_New Technology File System_NTFS_.pptx
new file mode 100644
index 0000000..1366957
Binary files /dev/null and b/FSCS727_Forensics/PPT/chap05/~$2_New Technology File System_NTFS_.pptx differ
diff --git a/FSCS727_Forensics/PPT/email_investigations.pdf b/FSCS727_Forensics/PPT/email_investigations.pdf
new file mode 100644
index 0000000..b3fca86
Binary files /dev/null and b/FSCS727_Forensics/PPT/email_investigations.pdf differ
diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch01.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch01.pptx
new file mode 100644
index 0000000..1042c55
Binary files /dev/null and b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch01.pptx differ
diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch02.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch02.pptx
new file mode 100644
index 0000000..7dbdb3c
Binary files /dev/null and b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch02.pptx differ
diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch03.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch03.pptx
new file mode 100644
index 0000000..d048793
Binary files /dev/null and b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch03.pptx differ
diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch04.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch04.pptx
new file mode 100644
index 0000000..fbb6a79
Binary files /dev/null and b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch04.pptx differ
diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch05.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch05.pptx
new file mode 100644
index 0000000..c2d26fd
Binary files /dev/null and b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch05.pptx differ
diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch06.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch06.pptx
new file mode 100644
index 0000000..c4bfd83
Binary files /dev/null and b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch06.pptx differ
diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch07.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch07.pptx
new file mode 100644
index 0000000..2c5b92a
Binary files /dev/null and b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch07.pptx differ
diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch08.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch08.pptx
new file mode 100644
index 0000000..2360ffc
Binary files /dev/null and b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch08.pptx differ
diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch09.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch09.pptx
new file mode 100644
index 0000000..4816563
Binary files /dev/null and b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch09.pptx differ
diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch10.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch10.pptx
new file mode 100644
index 0000000..c35c6ba
Binary files /dev/null and b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch10.pptx differ
diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch11.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch11.pptx
new file mode 100644
index 0000000..8be5bea
Binary files /dev/null and b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch11.pptx differ
diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch12.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch12.pptx
new file mode 100644
index 0000000..b1ccc53
Binary files /dev/null and b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch12.pptx differ
diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch13.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch13.pptx
new file mode 100644
index 0000000..5be103b
Binary files /dev/null and b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch13.pptx differ
diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch14.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch14.pptx
new file mode 100644
index 0000000..8d580c0
Binary files /dev/null and b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch14.pptx differ
diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch15.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch15.pptx
new file mode 100644
index 0000000..4035b9c
Binary files /dev/null and b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch15.pptx differ
diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch16.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch16.pptx
new file mode 100644
index 0000000..2845ec1
Binary files /dev/null and b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch16.pptx differ
diff --git a/FSCS727_Forensics/PPT/~$gcfi6e_ppt_ch08.pptx b/FSCS727_Forensics/PPT/~$gcfi6e_ppt_ch08.pptx
new file mode 100644
index 0000000..1366957
Binary files /dev/null and b/FSCS727_Forensics/PPT/~$gcfi6e_ppt_ch08.pptx differ