Course Curriculum

    1. Introduction to Shellbags

    2. Forensic Importance of Shellbags

    3. Check your Knowledge

    1. Shellbags Explorer - GUI

    2. Shellbags Explorer – Command-line

    3. ShellBagsView

    4. RegRipper

    1. Decoding Shellbag Artifacts

    2. BagMRU

    3. Bags

    4. LastWrite Timestamp

    5. LastWrite Timestamps Caveat

    1. Conclusion

    2. Exercises #1

    3. Exercises #2

    4. Exercises #2 - Solutions

About this course

  • $50.00
  • 16 lessons
  • 0 hours of video content

6 CPE Credits

After completing this course, you will earn:

Learning Outcomes

After completing this course, you will learn the following.

  • The ability to analyze and describe shellbag artifacts

  • The ability to utilize software to aid shellbag investigations

Technical Requirements

For the hands-on labs in this course

  • Windows machine (recommended Windows 10)

  • Internet connection

  • Registry Explorer

  • ShellBags Explorer

What is next at Cyber 5W?

Add your email to the mailing list to get the latest updates

Thank You