Computer Forensics Training
Forensic investigation of computer systems, hard drives, and activity logs.
Duration: 3 days
Overview
Focused on the forensic investigation of computers and storage media — recovering user activity, deleted files, and digital traces across hard drives and system logs.
Curriculum
What You Will Learn
- File-system structures (NTFS, FAT, exFAT)
- Deleted-file recovery and data carving
- Windows registry, prefetch, and event-log analysis
- Reconstructing user-activity timelines
- Detecting anti-forensics and data-hiding techniques
Who Should Attend
Investigators, IT-security teams, and auditors who need to trace activity on computer devices.
Interested in this training?
Request a schedule or an in-house program tailored to your organization.