OS Forensics Triage

This 3 day intensive course will cover all the features of the OSForensics software. Students will learn the following:

• Introduction to Computer Forensic Principles
• Drive Imaging (Physical vs. Logical) & Drive Preparation (Wiping)
• Introduction to Windows Forensics (Various Windows Artifacts)
• Basic Operations of OSForensics (Triage Features)
• Basic Operations of OSForensics (Forensics Features)
• Creating a Bootable and Non-Bootable OSForensics USB device
• Registry Analysis – Memory (RAM) Analysis
• Data Recovery (Data carving and custom file recovery)
• Password Extraction
• Decrypting Windows User Account Password
• File Decryption
• Email Analysis
• Automated Volume Shadow Copy Analysis
• Creating and Using Keyword Lists
• Examination of a MAC OS X drive
• Validating Your Tools
• Building Your Forensics Report

Note: OSForensics license not included. License can be purchased at 10% discount with class registration.