WinArt Class List
CC 315 - Windows Artifacts
WinArt covers the identification and extraction of artifacts associated with the current versions
of Microsoft Windows operating systems (Vista through Windows 10) and the NT
file system. Topics include the change journal, BitLocker, and a detailed
examination of the various artifacts found in each of the registry hive files.
Students examine event logs, volume shadow copies, link files, and thumbnails.
WinArt uses a mixture of lecture, discussion, demonstration, and hands-on
WinArt is a 4-day classroom course.
• CC 201 – Intermediate Data Recovery & Analysis (IDRA)
classroom course Register
Equivalent training and/or experience may substitute for the
There is 1 WinArt class currently scheduled.
Mon, Aug 29, 2016
Orange County RCFL|
3800 West Chapman Avenue
Orange, CA 92868
Back to List