Windows 10 Advanced Forensic Analysis (San Antonio, TX)

4-day Advanced Level Course

Course Overview

The Advanced Windows® 10 Forensic analysis class is an expert-level four-day training course, designed for examiners who are familiar with the principles of digital forensics and keen to expand their knowledge on advanced forensics using a host of third-party tools to improve their computer investigations.

The Spyder Forensic Advanced Windows® 10 Forensic Analysis course will give participants unbiased knowledge and skills necessary to analyze artifacts left behind through system and user interaction with the host system, utilizing industry standard tools and open source applications to explore the data in greater depth by learning how applications function and store data in the file system.

Students will learn to use various applications and utilities to successfully identify, process, understand and document numerous Windows® artifacts that are vitally important to forensic investigations. The participant will also gain knowledge on how to process Edge browser history, cookies, temp files InPrivate browsing challenges and analysis, BitLocker encryption, Windows® Action Center, TimeLine and other Windows® 10 specific artifacts. The course includes gaining in-depth knowledge of JumpLists, Registry analysis and prefetch files and how they relate to forensic investigations and conclude with an in-depth look at OneDrive and synchronization processes between trusted devices.

Students will use a variety of open source and leading forensic applications to examine key artifacts through multiple hands-on labs and student practicals.

FREE PASS to the TECHNO Security Conference is included with the course enrollment.

About the Trainer

Charles Giglia has been in the field of computer forensics since 2000 concentrating primarily on the research and development of computer forensic investigative techniques and training curriculum. Charles has an undergraduate degree in mathematics from Canisius College and a graduate degree in forensic science from the University of New Haven. Charles had been deployed nearly 18 months from 2007 to 2009 doing computer forensic investigations in support of Operation Iraqi Freedom while serving as a U.S. Army Contractor in Baghdad. Previously he spent six years as a Computer Crime Specialist with the NW3C while leading the development of numerous training classes. His primary concentrations were courses related to Internet investigations and Internet forensics. Charles has been a guest presenter at the FBI training academy, as well as several IACIS, FACT, RCFG/GMU, HTCIA international/regional conferences and an adjunct professor at Fairmont State College. He is a Certified Forensic Computer Examiner (CFCE) and a Red Hat Certified Engineer (RHCE).

Click here to inquire about this course