By the end of this course, students will have navigated through practical assessments requiring hands-on analysis of Windows-based evidence. Students will develop a strong familiarity with Windows evidence including file systems, operating systems, user, and application artifacts. Students will be knowledgeable with where evidence is located, the values stored in data structures and what this data indicates.
Cellebrite
8065 Leesburg Pike
Suite T3-302
Vienna VA 22182
DCA - Reagan International
IAD - Washington Dulles