Windows 11 Workshop (Live Remote) – Jan 2022
This specialized one-day workshop introduces you to the latest forensic artifact updates in the Microsoft Windows® 11 Operating System. The workshop will focus on new and updated system artifacts, new user data locations and explore analysis techniques with new virtualized applications. During this one-day course, participants will review various Windows 11 features, exploring traditional artifacts such as Chromium Edge, Cortana, OneDrive, Windows® Mail, TimeLine and how these items have changed in the lasted OS. Attendees will also gain insight in to BitLocker and mandatory requirements enforced by Microsoft.
Learn to use various applications and utilities to successfully identify, understand and document numerous Windows® artifacts that are vitally important to forensic investigations.
Learn how to process core system artifacts including SQLite Database analysis, and other new Windows®11 specific applications.
Gain in-depth knowledge of Windows OneDrive synchronization and how data is shared between trusted devices.
Attendees will use a variety of open source and leading forensic applications to examine key artifacts through multiple hands-on labs and practical’s.
The course will follow adult learning principles through training aids such as presentations, diagrams and practical instructor lead examples. Each artifact covered will be presented in either one or two 50-minute sessions followed by review questions. Students will be given the opportunity throughout the course to ask questions and discuss objectives covered in more detail. Throughout each day students will have practical exercises to work on in order to reinforce the topics.
What is Live Remote Synchronous Training?
Remote Synchronous Training (RST) allows the attendee to participate in a structured training courses remotely, in the comfort of your own office. It eliminates travel costs and provides a fully interactive environment, just like being in the classroom! RST delivery is specifically designed to simulate a live learning environment. Students have two-way communication with the instructor as well as the other students in the class using a typical hardware setup from their remote location. Instructors can monitor and interact with all students at the same time. When needed, instructors can assist students by physically interacting with his/her assigned machine in the Spyder Forensics remote classroom.
Why choose a Remote class?
Content is delivered exactly the same as in our live classes · Full interaction with the trainer and other course attendees · No travel costs and enjoy the class at your preferred location · Receive the same courseware as an in-person class, i.e. page color printed student manual for post class reference, USB with datasets and student files · Use of unique datasets developed by Spyder Forensics covering all artifacts covered in this class and others in our curriculum · Post class access the Spyder Forensics Academy (LMS) for supplementary courseware and online electronic version of the training manual
What you will need:
A computer (Windows or Apple) connected to the internet allowing access to GoToTraining™ for instructor delivery and Splashtop Streamer to interact with the remote classroom PC · A microphone to interact via voice with the class (not required as Chat window is always available) · Speakers to hear the class being delivered · Preferred 2 monitors to open multiple windows (GoToTraining and Splashtop windows)
What you will receive:
Printed course manual · Student USB · Access to the Spyder Forensics Academy · Course certificate