Event Type:
Monday Jun 20, 2022 - 08:00am UTC to Thursday Jun 23, 2022 - 04:00pm UTC
Event Description:
This course covers the identification and extraction of artifacts associated with the Microsoft Windows operating system. Topics include the Change Journal, BitLocker, and a detailed examination of the various artifacts found in each of the Registry hive files. Students also examine Event Logs, Volume Shadow Copies, link files, and thumbnails. This course uses a mixture of lecture, discussion, demonstration, and hands-on exercises.
Location:
1301 Third Street
5th Floor, Detroit Room
Detroit, MI
48226
United States
See map: Google Maps
| Amount | Description |
|---|---|
$0.00 | Free |
Space Available:
Yes
Category:
Program Areas: