Windows Forensics



Welcome to Module 8, Windows Forensics.  Of all the modules in the Computer Hacking & Forensics course, Windows Forensics is the most priceless in terms of knowledge gained and hands on experience required.

Windows Forensic Analysis focuses on the critical and in-depth digital forensics knowledge of the Microsoft Windows operating system.

You’ll learn about volatile vs. nonvolatile information, what it is and why it’s significant.  Forensic analysis would look at unauthorized open files, connections, clipboard activities and content, all these components are examples of volatile information as it relates to you determining what someone would be looking to modify.

We’ll also discuss at length how to profile a system, what tools to utilize and how to establish an accurate profile. You’ll learn the value of memory analysis, cookie & cache analysis and other targets that when complete will comprise a complete system profile.

Module 8, Windows Forensics has the following demonstration labs to help build your expertise:

  • Date Time Lab
  • Kdirstat Lab
  • Net File Lab
  • Net Session Lab
  • Net Statistics Lab
  • PSFile Lab
  • PSLoggedOn Lab
  • Regedit vs Regedt32 Comparison Lab
  • stat command Lab
  • Total Commander Lab
Recommended Study Material
Learn on the go.
The app designed for the modern cyber security professional.
Get it on Google PlayGet it on the App Store
Practice Labs and Exam Vouchers

Congratulations! You're taking the first step to getting certified. Get some hands on experience with available practice labs OR save some money, support Cybrary, and purchase discounted exam vouchers. Ready to earn your next industry certification? Join cyber security's largest community and start learning today.


Our Revolution

We believe Cyber Security training should be free, for everyone, FOREVER. Everyone, everywhere, deserves the OPPORTUNITY to learn, begin and grow a career in this fascinating field. Therefore, Cybrary is a free community where people, companies and training come together to give everyone the ability to collaborate in an open source way that is revolutionizing the cyber security educational experience.

Cybrary On The Go

Get the Cybrary app for Android for online and offline viewing of our lessons.

Get it on Google Play

Support Cybrary

Donate Here to Get This Month's Donor Badge

Skip to toolbar

We recommend always using caution when following any link

Are you sure you want to continue?