This module will give you the basics of some of the details you can find while investigating a Windows OS. This is a brief introduction to the artifacts you can find, and I feel an entire course could be spent covering the Windows Registry. Not only will you learn about the Windows registry in this module, but we will also dive into learning how to extract volatile information from a live system, extract data from a user web browser, and touch upon the recycle bin. Hopefully this module will help you also enhance your own security.
Produce a report from a forensics investigation of a Windows OS. → (LO #2)
Understand the importance of the Windows registry during a forensic investigation. → (LO #2)