BEC102 Advanced Computer-based Investigations Course
Date:TBA
Price: $1450 USD
Location: Online
This course is designed to provide local/federal law enforcement, military investigative personnel, and private sector security professionals training on the knowledge and skills required to leverage Windows resources and artifacts to perform a comprehensive timeline-based examination.
During course activities and exercises, participants will demonstrate the ability to perform forensically sound investigations and efficiently analyze digital artifacts pertaining to items of evidentiary value. Upon completion of this course, participants will be able to draft an effective report on findings detailing the analysis process followed to locate pertinent evidence.
COURSE DETAILS
Language: English
Duration: 2 days
Formats: Onsite or online
MODULES
- Introduction 1 Hour
- The Case Jacket 1 Hour
- Windows Registry Artifacts 2 Hours
- Parsing Windows Prefetch 1 Hour
- Parsing Link Files 1 Hour
- Windows 10 Timeline and Event Logs 2 Hours
- Understanding Metadata 1 Hour
- Final Practical 3 Hours
