DF310 Advanced Digital Forensic Analysis: Windows  (4 Days)

 pdf

Clackamas, OR
Mon 03/02/2020 - Thu 03/05/2020
8:00am-5:00pm
Clackamas County Sheriff's Office

Bowman Training Center
12800 SE 82nd Avenue
2nd Floor, Room 214A
Clackamas, OR 97015

Course description
This course covers the identification and extraction of artifacts associated with the Microsoft Windows operating system. Topics include the Change Journal, BitLocker, and a detailed examination of the various artifacts found in each of the Registry hive files. Students also examine Event Logs, Volume Shadow Copies, link files, and thumbnails. This course uses a mixture of lecture, discussion, demonstration, and hands-on exercises.

Recommended skills
This is an advanced course, intended for experienced digital forensic examiners with a solid understanding of digital forensic principles.

NW3C recommends that students complete the following courses before registering for Advanced Digital Forensic Analysis: Windows.

Cancellation
All classes are subject to cancellation up to 45 days before the start of class if the minimum class registration threshold is not met.

Class Fee: $0
2 seats available
Register for class
Clear to Register someone else