Practical Windows Forensics

سرفصل های دوره

01-1)-Welcome-to-Practical-Windows-Forensics-(PWF)

01-Welcome-and-course-introduction-(4-25-).html

01-Welcome-and-course-introduction-(4-25-)

02-Resources-and-Materials-Overview-(4-32-).html

02-Resources-and-Materials-Overview-(4-32-)

03-Course-Links.html

04-PWF-Course-Roadmap-(1-54-)

02-2)-Lab-Requirements

01-Lab-Setup-Overview-(3-15-)

03-3)-Setting-up-your-forensic-workstation

01-Build-your-forensic-workstation-tutorial-and-downloads-(7-06-).html

01-Build-your-forensic-workstation-tutorial-and-downloads-(7-06-)

02-VirtualBox and Windows 2019 VM installation.html

02-VirtualBox and Windows 2019 VM installation

03-WSL-and-Ubuntu-installation-on-Windows-2019-Server-(7-56-).html

03-WSL-and-Ubuntu-installation-on-Windows-2019-Server-(7-56-)

04-WSL-and-Ubuntu-installation-on-Windows-10-(alternative)-(4-03-).html

04-WSL-and-Ubuntu-installation-on-Windows-10-(alternative)-(4-03-)

05-Forensic-workstation-Windows-configuration-(5-37-)

06-Downloading-and-installing-forensic-tools-(12-04-).html

06-Downloading-and-installing-forensic-tools-(12-04-)

04-4)-Prepare-your-target-system

01-Download-and-install-the-Windows-10-VM-(9-58-).html

01-Download-and-install-the-Windows-10-VM-(9-58-)

02-Target-system-configuration-and-attack-script-preparation-(8-04-).html

02-Target-system-configuration-and-attack-script-preparation-(8-04-)

03-Execute-the-attack-script-on-the-target-system-(4-38-).html

03-Execute-the-attack-script-on-the-target-system-(4-38-)

05-5)-Data-collection-process

01-Forensic-process-overview-(3-16-).html

01-Forensic-process-overview-(3-16-)

02-Target-system-containment-(2-35-)

03-Memory-acquisition-of-the-target-system-(8-01-).html

03-Memory-acquisition-of-the-target-system-(8-01-)

04-Disk-acquisition-of-the-target-system-(9-04-).html

04-Disk-acquisition-of-the-target-system-(9-04-)

06-6)-Examination-of-the-forensic-data

01-Data-examination-process-overview-(1-04-).html

01-Data-examination-process-overview-(1-04-)

02-Mounting-the-disk-image-with-Arsenal-Image-Mounter-(8-32-).html

02-Mounting-the-disk-image-with-Arsenal-Image-Mounter-(8-32-)

03-Overview-of-Windows-files-and-forensic-artifacts-(5-46-).html

03-Overview-of-Windows-files-and-forensic-artifacts-(5-46-)

04-Creating-a-triage-data-collection-with-KAPE-(12-51-).html

04-Creating-a-triage-data-collection-with-KAPE-(12-51-)

07-7)-Disk-analysis-introduction

01-Sources-of-evidence-and-disk-analysis-process-overview-(3-10-)

02-Notes-taking-and-course-materials-(2-07-).html

02-Notes-taking-and-course-materials-(2-07-)

08-7.1)-Windows-registry-analysis

01-Windows-registry-overview-(17-07-).html

01-Windows-registry-overview-(17-07-)

02-Exploring-the-registry-with-Registry-Explorer-(9-34-)

03-Gathering-system-information-with-RegRipper-(9-25-).html

03-Gathering-system-information-with-RegRipper-(9-25-)

04-RegRipper-analysis-continued-(10-04-)

05-Parsing-registry-hives-in-bulk-with-RegRipper-(8-52-).html

05-Parsing-registry-hives-in-bulk-with-RegRipper-(8-52-)

06-User-accounts-and-SIDs-Overview-(11-27-).html

06-User-accounts-and-SIDs-Overview-(11-27-)

07-Analysis-of-user-accounts,-groups-and-profiles-(14-22-)

09-7.2)-User-behavior-analysis

01-User-behavior-analysis-overview-(3-39-)

02-UserAssist-analysis-(5-50-)

03-RecentDocs-analysis-(2-53-)

04-ShellBags-analysis-(13-57-)

10-7.3)-Overview-of-disk-structures,-partitions-and-file-systems

01-What-is-a-file-system--(1-44-)

02-Exploring-disk-structures-and-the-NTFS-(8-01-)

11-7.4)-Analysis-of-the-Master-File-Table-(MFT)

01-Overview-of-MFT-Records-(4-16-)

02-Analysis-of-MFT-Records-with-MFTECmd-(10-10-)

03-MFT-parsing-and-in-depth-analysis-with-MFTECmd-(12-46-)

04-File-timestamps-and-the-MACB-timestamp-format-(8-56-).html

04-File-timestamps-and-the-MACB-timestamp-format-(8-56-)

05-Investigating-file-timestomping-(3-29-)

12-7.5)-Finding-evidence-of-deleted-files-with-USN-Journal-analysis

01-How-can-we-find-evidence-of-deleted-files--(10-24-)

02-Analyzing-the-USN-Journal-for-deleted-files-(16-57-)

139,000 تومان

افزودن به سبد خرید

خرید دانلودی فوری

در این روش نیاز به افزودن محصول به سبد خرید و تکمیل اطلاعات نیست و شما پس از وارد کردن ایمیل خود و طی کردن مراحل پرداخت لینک های دریافت محصولات را در ایمیل خود دریافت خواهید کرد.

شناسه: 44950

حجم: 1255 مگابایت

مدت زمان: 333 دقیقه

تاریخ انتشار: ۲ تیر ۱۴۰۴