Claim your FREE 7-day trial

Windows Swap File

Get familiar with the Windows swap file, a great place for evidence to hide. Includes tools and demonstration video.

1 video  //  27 minutes of training

Course description

The Windows swap file, or pagefile.sys, is often a good place to find useful evidence. Take a moment to examine the swap file with this course: policy setting, the recovery process and third-party tools that can perform a wipe. Includes an extended demonstration using Autopsy and recovered files from a real-world investigation.

Course syllabus

Windows Swap FileDuration: 27:26

Meet the author



At Infosec, we believe knowledge is the most powerful tool in the fight against cybercrime. We help IT and security professionals advance their careers with a full regimen of certification and skills training. We also empower all employees with security awareness training to stay cybersecure at work and home. Driven by smart people wanting to do good, Infosec educates entire organizations on how to defend themselves from cybercrime. That’s what we do every day — equipping everyone with the latest security skills so the good guys win.

You're in good company

"Comparing Infosec to other vendors is like comparing apples to oranges. My instructor was hands-down the best I’ve had." 

James Coyle

FireEye, Inc.

"I knew Infosec could tell me what to expect on the exam and what topics to focus on most."

Julian Tang

Chief Information Officer

"I’ve taken five boot camps with Infosec and all my instructors have been great."

Jeffrey Coa

Information Security Systems Officer

Plans and pricing





$599 / license

Annually. Includes all content plus team admin and reporting.