This course covers the identification and extraction of artifacts associated with the Microsoft® Windows® operating system. Topics include the Change Journal, BitLocker®, and a detailed examination of various artifacts found in each of the Registry hive files. Students also examine event logs, Volume Shadow Copies, link files, and jump lists. This course uses a mixture of lecture, discussion, demonstration, and hands-on exercises.

Excel Office 365 is recommended, versions 2010 and newer will be functional.

Students who complete this course and pass the post-test are eligible for 1.0 point toward the 3CE certification.

Key concepts covered in this course include:

• The registry
• Shellbags
• Mounted devices
• Change journal
• Prefetch

This is an advanced course, intended for experienced digital forensic examiners with a solid understanding of digital forensic principles.

• Introduction to Previewing (online course)
• Encryption (online course)
• How Computers Work & Store Data (online course)
• Basic Digital Forensic Analysis: Windows Acquisition   (classroom or live online course)
• Intermediate Digital Forensic Analysis: Automated Forensic Tools (classroom or live online course)

This training will be delivered by highly qualified instructors in the field of Computer Forensics.

Duration (Days): 4

Please register your interest for the courses & we will inform you of the next intake.

We will update as soon as the course schedule is confirmed.

Meanwhile, please Register your interest to receive the most updated news:

• NW3C Courses
• Magnet Courses

Regarding Tuition Fees, please contact us to find out more.