By the end of this course, students will have navigated through practical assessments requiring hands-on analysis of Windows-based evidence. Students will develop a strong familiarity with Windows evidence including file systems, operating systems, user, and application artifacts. Students will be knowledgeable with where evidence is located, the values stored in data structures and what this data indicates.
Nevada Department of Public Safety Division of Parole and Probation Southern Command
215 E Bonanza Road
Las Vegas, Nevada 89101