Learn how an analyze Windows Shimcache evidence
Welcome to the Surviving Digital Forensics series. This class is focused on helping you become a better computer forensic examiner by understanding how to use Windows Shimcache data to prove file use and knowledge - all in about one hour.
As with previous SDF classes you will learn by doing. The class begins with Windows Shimcache fundamentals and will provide an understanding of how the artifact works. Then students delve into several validation exercises to observe how user driven activity affects Windows Shimcache evidence. The last section teaches students how to use freely available DFIR community built forensic tools to examine Shimcache evidence. By the end of the class students will have a solid understanding of how to use the Windows Shimcache as evidence, understand the types of user behaviors that affect the Shimcache and know how to use Windows Shimcache forensic tools.
Expert and novice computer forensic examiners alike will gain from this class. Since we are doing it the SDF way we are going to teach you real computer forensic skills that you can apply using our method or with any forensic tool you choose. Therefore you are not just going to learn about the Windows Shimcache but you will learn a method you can use to answer questions that may come up in the future.
A PC running Windows 8 or Windows 10 is required for this course. The forensic tools we use are all freely available, so beyond your laptop and operating system all you need is the desire to become a better computer forensic examiner.
Understand the Shimcache artifact
Be able to explain Shimcache evidence
Learn the user behaviors that affect the artifact
9 Lectures
5 Lectures
4 Lectures
2 Lectures
Over 20 years of experience in Digital Forensics and Security Incident Response. Investigations span corporate (Fortune 500) incident response, technical litigation support for civil and criminal cases, and e-discovery. Author and developer of computer forensic training and analysis tools. Specialties include Windows forensics, Linux forensics, Mac forensics, & mobile device forensics. Certifications include: C|EH, CFCE, CISSP, EnCE, CCE
nice course content and explanation
Wow
thank you
This series is the best. Nothing more to add)))
Great class!
An excellent explanation in simple terms and elaboration of each and every aspect. Pace of the lecture is perfect.
Great step by step instruction, smooth pace, and bonus scripts instead of having to manually create them at the end.
An interesting Course , I counsel it warmly, very informative and useful !
The tutor is really good, enjoyed all the sessions, and he is clear with explaining the concepts.
Your email address will not be published. Required fields are marked *
Kai P. W. K.
Gute Einführung in das Thema, hat mir sehr geholfen.