Surviving Digital Forensics: Windows Explorer
What you'll learn
- Overview of target files used for IE History
- Learn about the target files in IE History you can use to extract file access data
- Learn how to organize these files to use with a freely available forensic tool
- Learn how to use this technique to obtain the file names & file paths of user accessed files
- Learn how to identify when a file was last accessed in IE History
- Learn how to tell how many times a file was accessed in IE History
- Learn how to identify accessed files from the local system and tell them apart from those on other volumes (such as external media or networked drives)
Requirements
- PC system (PC VM will do)
Description
Welcome to the Surviving Digital Forensics series. Oftentimes you will be asked to find information on a target system that shows if a user accessed certain files, the last time they did and/ or how often they did. Being able to put a picture together that answers these questions can be critical and make or break the case. In this course you will learn one method that can be used to answer these questions. Of course we will be using all low cost or no cost computer forensic tools. The course is focused on just what you need and you will be up and running in under an hour.
As with previous SDF classes you will learn by doing. The class begins with a brief overview of the method we will be using and then it is all hands on. There are three practicals in which you work with our prepared files in applying the technique as well as questions to answer about each scenario.
Who this course is for:
- Computer forensic analysts
- IT professionals
- Students
Course content
- Preview06:01
Instructor
![Michael Leclair](data:image/svg+xml,%3Csvg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64"%3E%3C/svg%3E){kind=avatar}
- 4.5 Instructor Rating
- 1,119 Reviews
- 4,856 Students
- 15 Courses
Over 15 years of experience of Digital Forensic and Incident Response experience, author and developer of computer forensic training and analysis tools. Specialties include: Windows forensics, Mac forensics, iOS forensics, Mac Server forensics & mobile device forensics.
Certifications include: CFCE, CISSP, CCE, EnCE, A+, Network+
Regularly instruct law enforcement, government and corporate investigators both nationally and internationally in computer forensics.