Advanced IT-Forensik (AITF)
Quién debería asistir
- IT-Security appointees
- EDV Revisors
- Members of Incident Response Teams
Prerrequisitos
Objetivos del curso
This course is based on the IT-Forensik (ITF) course and deals with the data system NTFS. In addition you will learn where and when Windows creates protocol files which can help in a detailed system analysis.
Contenido del curso
Intensive examination with NTFS
- Organisation of files and directories
- EFS encrypted files
- Comprimised files
- Sparse files
Artefacts of user activities
- Program starts and pre fetch files
- Evaluation of the registry
- User profiles
- Link files
- Spool files from print orders
- Internet activities
- Previews
- Restore Points
Duración: 3 días
Calendario
Por el momento no hay fechas programadas para este curso Solicitud de fecha de entrenamiento