Build Virtual Forensic Systems using ALL free software Virtual machines are a cost-effective way of increasing the investigative and examination capacity of your forensic lab…. Read More

Find evidence of past and present executables on Windows systems and uncover malicious tools. Shimcache evidence can be crucial for Incident Response investigations, data spoliation… Read More

This class has been taken offline temporarily while it is being updated A system’s memory contains an assortment of valuable forensic data. A computer analyst… Read More

This class has been taken offline temporarily while it is being updated A system’s memory contains an assortment of valuable forensic data. A computer analyst… Read More

Learn Memory Dump techniques. Conducting a RAM extraction as part of the computer evidence collection process is a front line examiner skill which becoming more… Read More

This class has been taken offline temporarily while it is being updated A system’s memory contains an assortment of valuable forensic data. A computer analyst… Read More

Learn manual interpretation of Windows LNK files to get File Use & Knowledge Evidence. Windows LINK files are a great source of information when your… Read More

Find evidence of file system traversal. Welcome to the Surviving Digital Forensics series. This series is focused on helping you become a better computer forensic… Read More

Get evidence of file execution on Windows Systems. Welcome to the Surviving Digital Forensics series. This class is focused on helping you become a better… Read More

Discover USB devices attached to Windows systems. Have you ever been asked to find out what the “F” drive is? Have you ever needed to… Read More

Learn to Virtualize the PALADIN ISO. This class will teach you how to create a forensic virtual machine using Paladin and other free software in under… Read More

Learn manual volume shadow disk imaging. Time travel anyone? Well, sort of… By creating computer forensic images from volume shadow copies you are able to… Read More

Find user accessed files for File Use & Knowledge evidence. Welcome to the Surviving Digital Forensics series. Oftentimes you will be asked to find information… Read More

Learn to interpret OS X dates and times. Welcome to the Surviving Digital Forensics series. This class is focused on helping you get a better… Read More

Learn Mac Fusion Drive imaging techniques and more. Welcome to the Surviving Digital Forensics series. This series is focused on helping you become a better… Read More