Course description
This course covers the modern Windows operating system and the location of forensic artifacts within the OS, such as artifacts showing program execution and installation, user interaction with a file, network connections and internet artifacts.
Syllabus
Activities cache database
Video - 00:53:00
This video is an in-depth analysis of the Activities Cache Database, showing programs, files and the clipboard history tied to a user.
The Recycle Bin
Video - 00:09:00
This video explains how the Recycle Bin functions and how to resolve a Recycle Bin to a specific user on the system.
Windows Prefetch
Video - 00:13:00
This video explains the forensic value of Window Prefetch and how it can be used to show program execution.
Link files
Video - 00:34:00
This video shows how to analyze and interpret link files as the disk level.
Windows Recent: Jump lists
Video - 00:37:00
This video shows how to locate, extract and examine Windows jump lists.
Unlock 7 days of free training
- 1,400+ hands-on courses and labs
- Certification practice exams
- Skill assessments
Plans & pricing
Infosec Skills Personal
$299 / year
- 190+ role-guided learning paths (e.g., Ethical Hacking, Threat Hunting)
- 100s of hands-on labs in cloud-hosted cyber ranges
- Custom certification practice exams (e.g., CISSP, Security+)
- Skill assessments
- Infosec peer community support
Infosec Skills Teams
Book a meeting to get a custom quote
- Team administration and reporting
- Dedicated client success manager
-
Single sign-on (SSO)
Easily authenticate and manage your learners by connecting to any identity provider that supports the SAML 2.0 standard.
-
Integrations via API
Retrieve training performance and engagement metrics and integrate learner data into your existing LMS or HRS.
- 190+ role-guided learning paths and assessments (e.g., Incident Response)
- 100s of hands-on labs in cloud-hosted cyber ranges
- Create and assign custom learning paths
- Custom certification practice exams (e.g., CISSP, CISA)
- Optional upgrade: Guarantee team certification with live boot camps
Award-winning training you can trust