دوره 13Cubed – Investigating Windows Endpoints

Unlock the secrets of Windows forensic investigation with my new course! I took my years of experience creating videos on the 13Cubed YouTube channel and set out to develop affordable, comprehensive, and professional training. Whether you’re looking to get into the field, already work in the field but want to step up your game, or just have an interest in digital forensics, look no further. This course is for you!

Syllabus

1. Welcome and Introduction
2. Initial Setup
3. Windows Event Logs
4. The Registry
5. Evidence of Execution
6. Persistence, Privilege Escalation, and Lateral Movement
7. Anatomy of NTFS
8. File Deletion and Recovery
9. LNK Files and Jump Lists
10. Additional Content
11. Knowledge Assessment

Investigating Windows Endpoints