Discover how to analyze LINK file evidence in Windows systems for computer forensics, enhancing your skills in file usage and user behavior interpretation.
This course dives into LINK files on Windows, teaching you how to read them manually and understand user actions. With hands-on fun and essential tools, you’ll learn to extract and interpret these valuable files in no time!
A computer forensic guide for understanding LINK file evidence on Windows computer systems
Windows LINK files are a great source of information when your aim is proving file use and knowledge during a computer forensic investigation. This course goes beyond automated results and digs into the body of a LINK file in order to understand how it is constructed and how to manually pull out and interpret the data. Through a series of hands-on validation exercises and practical exercises you will gain a firm understanding of how LINK file data is affected by different types of user driven behavior.  Using all freely available tools, this course takes you through the process of understanding what automated tools do under the hood - all in about an hour.
Source material for the practical exercises is provided. Just bring your Windows 7 or Windows 8 system and a desire to learn.
Learn how to interpret LINK files on Windows 7 & Windows 8 systems
Learn how to tie a specific User account to LINK file activity
Learn to identify first and last file access times using LINK files
8 Lectures
5 Lectures
5 Lectures
2 Lectures
Over 20 years of experience in Digital Forensics and Security Incident Response. Investigations span corporate (Fortune 500) incident response, technical litigation support for civil and criminal cases, and e-discovery. Author and developer of computer forensic training and analysis tools. Specialties include Windows forensics, Linux forensics, Mac forensics, & mobile device forensics. Certifications include: C|EH, CFCE, CISSP, EnCE, CCE
Curso interesante
didnt get the certificate
Very good online session, describing every thing in detail about link files, how to identify retrieve and what are the points need to be checked when trying to find out link files. Very good instructor. Looking for more.
Yes it was worth the time invested in learning and also helpful for manual analysis wherein live memory captures are required
Very nice course
Great Job. Love to see more updated content.
good
Very informative on-line course taken by a very good instructor.
Excellent
Your email address will not be published. Required fields are marked *
Jeremy H.
The course described the value of LINK files very well. The hex file analysis was the most valuable part of the course.