Advanced IT-Forensik (AITF)
Who should attend
- IT-Security appointees
- EDV Revisors
- Members of Incident Response Teams
Prerequisites
Course Objectives
This course is based on the IT-Forensik (ITF) course and deals with the data system NTFS. In addition you will learn where and when Windows creates protocol files which can help in a detailed system analysis.
Course Content
Intensive examination with NTFS
- Organisation of files and directories
- EFS encrypted files
- Comprimised files
- Sparse files
Artefacts of user activities
- Program starts and pre fetch files
- Evaluation of the registry
- User profiles
- Link files
- Spool files from print orders
- Internet activities
- Previews
- Restore Points
Duration: 3 days
Prices (excl. VAT):
- Switzerland: Fr. 2,690.-
- Germany: 1,790.- €
Click on the location to go directly to the booking pageSchedule
Switzerland
Currently there are no local training dates scheduled. For enquiries please write to info@flane.ch.
Germany
15/10/2012 - 17/10/2012
Munich
10/12/2012 - 12/12/2012
Düsseldorf
