18 - 21 Apr 2017
26/2017 Cybercrime - advanced Windows file systems forensics

The aim of this course is to improve detailed knowledge on how investigation items can be recovered from file systems. It will also allow practitioners to explain forensic tools reports and conduct searches beyond usual reported traces, in order to establish trace history and potential use of anti-forensics.