Cellebrite Windows Forensic Investigations (CWFI) is a four (4) day intermediate level training course designed to teach and improve practitioners Windows forensic analysis skills. Students will receive detailed instruction about Windows-based file systems, operating systems, user data, and application artifacts, including Windows 10 artifacts. Emphasis is placed on teaching file system functions and where critical information is stored for insightful, expedited investigations.
Download course information here: Cellebrite Windows Forensic Investigations
By the end of this course, students will have navigated
through practical assessments requiring hands-on analysis of Windows-based
evidence. Students will develop a strong familiarity with Windows evidence
including file systems, operating systems, user, and application artifacts.
Students will be knowledgeable with where evidence is located, the values
stored in data structures and what this data indicates.