Curriculum
Course Content
4 items · 1 sections
- 01 Registry and event log forensics
- 02 Execution and user-activity artefacts
- 03 Correlating into a timeline
- 04 Attacker versus user activity
GCIA
Advanced
Certificate
Windows Forensics
Reconstructing what happened on a Windows host from what it left behind. The registry, event logs, execution artefacts and user activity, correlated into a timeline of the attack.
Skills
What You Will Learn in This Course
Analyse the registry and event logs forensically.
Recover execution and user-activity artefacts.
Correlate artefacts into a timeline.
Distinguish attacker from user activity.
About This Course
Reconstructing what happened on a Windows host from what it left behind. The registry, event logs, execution artefacts and user activity, correlated into a timeline of the attack.
Requirements
- Digital forensics fundamentals.
Who It Is For
- Forensics-track analysts.
Certified
Certificates You Can Earn
Finish your course and receive an accredited MotiGraph certificate you can add to your CV and share with employers.
