DFIR Operator Series: Windows Forensics 101
Windows is the most widely used desktop operating system in the world. Gathering and understanding forensic evidence from Windows devices is critical to success in DFIR. Get hands-on and understand evidence collection from Windows machines while thinking like an investigator so you can root out adversaries in your environment.
Already have an account? Sign In »

Windows is the most widely used desktop operating system in the world. Gathering and understanding forensic evidence from Windows devices is critical to success in DFIR. Get hands-on and understand evidence collection from Windows machines while thinking like an investigator so you can root out adversaries in your environment.

Marc Balingit
Security Researcher - Incident Response


Complete this entire course to earn a DFIR Operator Series: Windows Forensics 101 Certificate of Completion