33/2021 Cybercrime - Advanced Windows file system forensics

The aim of the activity is to enhance cyber forensics works of forensic experts by providing computer forensics practitioners with detailed knowledge on the recovery of investigation items from file systems and by allowing them to explain forensic tools reports and conduct searches beyond usual reported traces in order to establish a trace history, and potential use of anti-forensics.