CFDI 345 - Operating System Forensics

Many digital investigations require an understandingof where operating systems store information. Forensic practitioners need to understand the analysis of the three major operating systems they may encounter in a real world analysis. Topics covered will include memory acquisition and analysis, timeline investigation, configuration settings including the Windows registry and tracking information that is stored within operating system settings. The course will cover Windows, Mac OS X and Linux investigations and artifacts.
Prerequisites: Complete CFDI-240
Credits: 3