Course Code: IFIS/SCE/DF002

This course centres on building in-depth digital forensics knowledge of Microsoft Windows operating systems. You will learn how to recover, analyse, and substantiate forensic data on Windows systems, track particular user activity on your network, and organize findings for use in incident response, internal investigations, and civil/criminal proceedings. You will be able to use your new skills to validate security tools, enhance vulnerability assessments, identify insider threats, track hackers, and improve security policies.

Target Audience

• Application Security Professionals
• If you are trying to automate the cumbersome process of Mobile Application Security Assessment; Don’t hesitate, this is for you.
• If you want to learn Mobile Application Security, this course is probably not for you.

What You Will Learn?

• Assess the risk of fraud within your organization and respond when it is identified
• Detect and investigate fraud with the use of data analytics
• Collect documents and electronic evidence needed in the course of an investigation
• Perform effective information-gathering and admission-seeking interviews.
• Discern legal and regulatory concerns related to internal investigations
• Learn event log analysis techniques and use them to determine when and how users logged into a Windows system, whether via a remote session, at the keyboard, or simply by unlocking a screensaver
• Determine where a crime was committed using Registry data to pinpoint the geo-location of a system by examining connected networks and wireless access points
• Determine the number of times files have been opened by a suspect through browser forensics, shortcut file analysis (LNK), e-mail analysis, and Windows Registry parsing

Laptop Requirements

• CPU: 64-bit Intel i5/i7 (4th generation+) – x64 bit 2.0+ GHz processor or more recent processor is mandatory for this class (Important – Please Read: a 64-bit system processor is mandatory)
• 8 GB (Gigabytes) of RAM or higher is mandatory for this class (Important – Please Read: 8 GB of RAM or higher of RAM is mandatory and minimum. For best experience, 16GB of RAM is recommended.)
• Wireless 802.11 Capability
• USB 3.0
• 250+ Gigabyte Host System Hard Drive minimum
• 200 Gigabytes of Free Space on your System Hard Drive – Free Space on Hard Drive is critical to host the VMs we distribute
• Students should have the capability to have Local Administrator Access within their host operating system and BIOS settings