DF310 Advanced Digital Forensic Analysis: Windows  (4 Days)


Manchester, NH
Mon 10/21/2019 - Thu 10/24/2019
Manchester Police Department

Michael Briggs Public Safety Building
405 Valley Street
2nd Floor Training Room
Manchester, NH 03103

Course description
This course covers the identification and extraction of artifacts associated with the Microsoft Windows operating system. Topics include the Change Journal, BitLocker, and a detailed examination of the various artifacts found in each of the Registry hive files. Students also examine Event Logs, Volume Shadow Copies, link files, and thumbnails. This course uses a mixture of lecture, discussion, demonstration, and hands-on exercises.

Recommended skills
This is an advanced course, intended for experienced digital forensic examiners with a solid understanding of digital forensic principles.

NW3C recommends that students complete the following courses before registering for Advanced Digital Forensic Analysis: Windows.

All classes are subject to cancellation up to 45 days before the start of class if the minimum class registration threshold is not met.

Class Fee: $0
2 seats available
Register for class
Clear to Register someone else