WINDOWS FORENSICS INVESTIGATION

Catalog description

This course covers the theory and practice of investigating Windows operating systems for digital forensic analysis. Furthermore, it explores program-execution evidence, lateral movement, Windows Registry, and the importance of timestamping for time-critical digital forensic investigation. The course also reviews various digital forensic tools that assist in conducting a comprehensive digital forensic analysis on Windows operating systems. (3 credit)