ICAC-DF310 Advanced Digital Forensic Analysis: Windows

Delivery Method: Virtual
Location: Online
Duration: 4 Days
Date: 09/11/2023 – 09/14/2023
Time: 11:00 AM – 8:00 PM Eastern

Register Here

This course covers the identification and extraction of artifacts associated with the Microsoft® Windows® operating system. Topics include the change journal, BitLocker® , and a detailed examination of the various artifacts found in each of the Registry hive files. Students also examine Event Logs, Volume Shadow Copies, link files, and jump lists. This course uses a mixture of lecture, discussion, demonstration, and hands-on exercises.

Key concepts covered in this course include:
• The registry
• Shellbags
• Mounted devices
• Change journal
• Prefetch

Excel Office 365 recommended, versions 2010 and newer will be functional.

Closed captioning is always available to students. Live speech-to-text language translations to 100 different languages is also available. Contact support@nw3c.org if you would like this service.