Curriculum
Course Content
4 items · 1 sections
- 01 Execution and access artefacts
- 02 Account and authentication artefacts
- 03 Correlating into a narrative
- 04 Defending the conclusion
GCFA
Advanced
Certificate
Windows Forensics
Deep Windows disk forensics. The full set of execution, access and account artefacts, correlated to answer exactly what ran, when, and by whom on a compromised host.
Skills
What You Will Learn in This Course
Recover the full set of Windows artefacts.
Answer what ran, when and by whom.
Correlate disk artefacts into a narrative.
Defend the conclusion with evidence.
About This Course
Deep Windows disk forensics. The full set of execution, access and account artefacts, correlated to answer exactly what ran, when, and by whom on a compromised host.
Requirements
- Digital forensics fundamentals.
Who It Is For
- GCFA-track analysts.
Certified
Certificates You Can Earn
Finish your course and receive an accredited MotiGraph certificate you can add to your CV and share with employers.
