Windows forensic artifacts Course

Take a look at forensic objects in the modern Windows operating system.

2 hours, 27 minutes

Course description

This course covers the modern Windows operating system and the location of forensic artifacts within the OS, such as artifacts showing program execution and installation, user interaction with a file, network connections and internet artifacts.

Syllabus

Activities cache database

Video - 00:53:00
This video is an in-depth analysis of the Activities Cache Database, showing programs, files and the clipboard history tied to a user.
The Recycle Bin

Video - 00:09:00
This video explains how the Recycle Bin functions and how to resolve a Recycle Bin to a specific user on the system.
Windows Prefetch

Video - 00:13:00
This video explains the forensic value of Window Prefetch and how it can be used to show program execution.
Link files

Video - 00:34:00
This video shows how to analyze and interpret link files as the disk level.
Windows Recent: Jump lists

Video - 00:37:00
This video shows how to locate, extract and examine Windows jump lists.

Meet the author

Denise Duffy

In addition to being an Infosec instructor, Denise Duffy teaches computer forensics worldwide to European law enforcement through the European Anti-Fraud Office. During her 25-year career at the Middletown Police Department, Denise underwent extensive training in specialized computer and mobile device forensics, including widespread access data courses, multiple IACIS trainings, U.S. Secret Service Training at the National Computer Forensics Institute, BlackBag Technologies Training, many National White Collar Crime (NW3C) courses, an X-Ways online course and considerable Internet Crimes Against Children Training (ICAC) courses.

Denise currently holds the following certifications: CFCE (Certified Forensic Computer Examiner), CCFE (Certified Computer Forensics Examiner), CMFE (Certified Mobile Forensics Examiner) and CEH (Certified Ethical Hacker). She is most proud of her two sons who joined the U.S. Military, as Denise is a Desert Shield/Desert Storm veteran herself.

Learn More

Unlock 7 days of free training

  • 1,400+ hands-on courses and labs
  • Certification practice exams
  • Skill assessments
Start a Free Trial

Plans & pricing

Infosec Skills Personal

$299 / year

Buy Now 7-Day Free Trial
  • 190+ role-guided learning paths (e.g., Ethical Hacking, Threat Hunting)
  • 100s of hands-on labs in cloud-hosted cyber ranges
  • Custom certification practice exams (e.g., CISSP, Security+)
  • Skill assessments
  • Infosec peer community support

Infosec Skills Teams

$799 per license / year

Book a Meeting
  • Team administration and reporting
  • Dedicated client success manager
  • Single sign-on (SSO)
    Easily authenticate and manage your learners by connecting to any identity provider that supports the SAML 2.0 standard.
  • Integrations via API
    Retrieve training performance and engagement metrics and integrate learner data into your existing LMS or HRS.
  • 190+ role-guided learning paths and assessments (e.g., Incident Response)
  • 100s of hands-on labs in cloud-hosted cyber ranges
  • Create and assign custom learning paths
  • Custom certification practice exams (e.g., CISSP, CISA)
  • Optional upgrade: Guarantee team certification with live boot camps

Learn about scholarships and financing with

Affirm logo

Award-winning training you can trust