Products
-
Investigating Windows System Registry Artifacts
CourseThis course introduces the Windows Registry and explains the importance of the forensic artifacts within it pertaining to the system.
$50
-
Investigating Windows User Registry Artifacts
CourseThis course builds on the knowledge attained in the System Artifacts course to enable you to analyze user artifacts and actions in order to create a timeline of events for each user.
$50
-
Investigating Windows Shellbags
CourseThis course explores Windows shellbags. Throughout this course, you will learn what shellbags are, where they exist, why they exist, how to analyze them, and what they can be used for in forensic investigations.
$50
-
Investigating USB Thumb Drives
CourseThis course covers the USB forensic artifacts found on Windows systems. You will learn how to locate artifacts related to USBs that have been connected to the system and their importance to a forensic investigation.
$50
-
Volume Shadow Copies (VSC)
CourseThroughout this course, you will learn what shadow copies are, how Windows saves and tracks volume shadow copies, and how they can be used in forensic investigations.
$50
-
Investigating Windows Scheduled Tasks
CourseThis course introduces the Windows Scheduled Tasks and explains its formats and importance from a forensics perspective.
Free