دوره FOR500: Windows Forensic Analysis

FOR500 is a specialized course designed to equip digital forensics professionals with the skills needed to investigate and analyze Windows-based systems. The course focuses on extracting and analyzing digital evidence from Windows operating systems, including artifacts related to user activity, system events, malware infections, and cyber attacks.

Syllabus

1. Digital Forensics and Advanced Data Triage
2. Registry Analysis, Application Execution, and Cloud Storage Forensics
3. Shell Items and Removable Device Profiling
4. Email Analysis, Windows Search, SRUM, and Event Logs
5. Web Browser Forensics
6. Windows Forensics Challenge