This is a freely available preview version of the Practical Windows Forensics course! Enjoy a few samples for free before you buy!
Sign up now to get access!
Course Description: Students will learn hands-on how to perform a full digital forensic investigation of a Windows system in a complete do-it-yourself setup. The course covers a full digital forensic investigation of a Windows system.
You can find the course materials for free on the PWF Github repository.
Course Content
Practical Windows Forensics (PWF) – Introduction and Overview
You don't currently have access to this content
Practical Windows Forensics (PWF) – Resources
You don't currently have access to this content
Practical Windows Forensics (PWF) – Course Roadmap
You don't currently have access to this content
Practical Windows Forensics (PWF) – Lab Setup Overview
You don't currently have access to this content
Practical Windows Forensics (PWF) – Forensic Workstation Installation
You don't currently have access to this content
Practical Windows Forensics (PWF) – Target System Setup
You don't currently have access to this content
Practical Windows Forensics (PWF) – The Forensic Procss
You don't currently have access to this content
Practical Windows Forensics (PWF) – Containment and Preservation of Evidence using VirtualBox
You don't currently have access to this content
Practical Windows Forensics (PWF) – Memory Acquisition with VirtualBox
You don't currently have access to this content
Practical Windows Forensics (PWF) – Disk Acquisition with VirtualBox
You don't currently have access to this content
Practical Windows Forensics (PWF) – User Accounts Analysis
You don't currently have access to this content
Practical Windows Forensics (PWF) – BONUS: Amcache in-depth analysis and why scheduled tasks matter
You don't currently have access to this content
Practical Windows Forensics (PWF) – Memory Analysis with Volatility3 – Overview
You don't currently have access to this content
Practical Windows Forensics (PWF) – Detecting suspicious Windows processes with Volatility3
You don't currently have access to this content
Practical Windows Forensics (PWF) – Dumping and analyzing processes from the memory with Volatility3
You don't currently have access to this content
Practical Windows Forensics (PWF) – Digital Forensics – Reporting and Presentation of Findings
You don't currently have access to this content