Cellebrite Windows Forensic Investigations (CWFI) is a four (4) day intermediate level training course designed to teach and improve practitioners Windows forensic analysis skills. Students will receive detailed instruction about Windows-based file systems, operating systems, user data, and application artifacts, including Windows 10 artifacts. Emphasis is placed on teaching file system functions and where critical information is stored for insightful, expedited investigations.<br><br>

Download course information here: <b><a href="https://cellebritelearningcenter.mcoutput.com/cwfi.courseinfo.en/CWFI%20Slick.pdf"><u>Cellebrite Windows Forensic Investigations</u></a></b>

By the end of this course, students will have navigated through practical assessments requiring hands-on analysis of Windows-based evidence. Students will develop a strong familiarity with Windows evidence including file systems, operating systems, user, and application artifacts. Students will be knowledgeable with where evidence is located, the values stored in data structures and what this data indicates.