Capstone Question #22
|
Capstone Practical Exercise |
4 |
|
Capstone Question #21
|
Capstone Practical Exercise |
4 |
|
Capstone Question #20
|
Capstone Practical Exercise |
4 |
|
Capstone Question #19
|
Capstone Practical Exercise |
4 |
|
Capstone Question #14
|
Capstone Practical Exercise |
4 |
|
Capstone Question #34
|
Capstone Practical Exercise |
4 |
|
Capstone Question #32
|
Capstone Practical Exercise |
4 |
|
Capstone Question #31
|
Capstone Practical Exercise |
4 |
|
Capstone Question #35
|
Capstone Practical Exercise |
4 |
|
Capstone Question #15
|
Capstone Practical Exercise |
4 |
|
Capstone Question #13
|
Capstone Practical Exercise |
4 |
|
Capstone Question #12
|
Capstone Practical Exercise |
4 |
|
Capstone Question #11
|
Capstone Practical Exercise |
4 |
|
Capstone Question #10
|
Capstone Practical Exercise |
4 |
|
Capstone Question #09
|
Capstone Practical Exercise |
4 |
|
Capstone Question #08
|
Capstone Practical Exercise |
4 |
|
Capstone Question #07
|
Capstone Practical Exercise |
4 |
|
Capstone Question #06
|
Capstone Practical Exercise |
4 |
|
Capstone Question #05
|
Capstone Practical Exercise |
4 |
|
Capstone Question #04
|
Capstone Practical Exercise |
4 |
|
Capstone Question #03
|
Capstone Practical Exercise |
4 |
|
Capstone Question #02
|
Capstone Practical Exercise |
4 |
|
Capstone Question #01
|
Capstone Practical Exercise |
4 |
|
Capstone - Part 3 of 3
|
Capstone Exercise Introductions |
0 |
|
Capstone - Part 2 of 3
|
Capstone Exercise Introductions |
0 |
|
Capstone - Part 1 of 3
|
Capstone Exercise Introductions |
0 |
|
00 - Capstone Scenario
|
Capstone Exercise Introductions |
0 |
|
Mounted Devices Question #3
|
10 - Mounted Devices |
2 |
|
Mounted Devices Question #2
|
10 - Mounted Devices |
2 |
|
Mounted Devices Question #1
|
10 - Mounted Devices |
2 |
|
10 - Mounted Devices
|
Practical Exercise Introductions |
0 |
|
File History Question #5
|
11 - File History |
2 |
|
File History Question #4
|
11 - File History |
2 |
|
File History Question #3
|
11 - File History |
2 |
|
File History Question #2
|
11 - File History |
2 |
|
File History Question #1
|
11 - File History |
2 |
|
11 - File History
|
Practical Exercise Introductions |
0 |
|
Change Journal Question #3
|
08 - Change Journal |
2 |
|
Change Journal Question #4
|
08 - Change Journal |
2 |
|
Change Journal Question #2
|
08 - Change Journal |
2 |
|
Change Journal Question #1
|
08 - Change Journal |
2 |
|
08 - Change Journal
|
Practical Exercise Introductions |
0 |
|
Link Files & Jump Lists Question #3
|
09 - Link Files & Jump Lists |
2 |
|
Link Files & Jump Lists Question #2
|
09 - Link Files & Jump Lists |
2 |
|
Link Files & Jump Lists Question #1
|
09 - Link Files & Jump Lists |
2 |
|
09 - Link Files & Jump Lists
|
Practical Exercise Introductions |
0 |
|
Event Logs Question #4
|
07 - Event Logs |
2 |
|
Event Logs Question #1
|
07 - Event Logs |
2 |
|
Event Logs Question #2
|
07 - Event Logs |
2 |
|
Event Logs Question #3
|
07 - Event Logs |
2 |
|
07 - Event Logs
|
Practical Exercise Introductions |
0 |
|
Prefetch Question #4
|
06 - Prefetch |
2 |
|
Prefetch Question #3
|
06 - Prefetch |
2 |
|
Prefetch Question #2
|
06 - Prefetch |
2 |
|
Prefetch Question #1
|
06 - Prefetch |
2 |
|
06 - Prefetch
|
Practical Exercise Introductions |
0 |
|
Shellbags Question #6
|
05 - Shellbags |
2 |
|
Shellbags Question #4
|
05 - Shellbags |
2 |
|
Shellbags Question #5
|
05 - Shellbags |
2 |
|
Shellbags Question #3
|
05 - Shellbags |
2 |
|
Shellbags Question #2
|
05 - Shellbags |
2 |
|
Shellbags Question #1
|
05 - Shellbags |
2 |
|
05 - Shellbags
|
Practical Exercise Introductions |
0 |
|
UserAssist Question #4
|
04 - Registry Artifacts: NTUSER |
2 |
|
UserAssist Question #3
|
04 - Registry Artifacts: NTUSER |
2 |
|
UserAssist Question #2
|
04 - Registry Artifacts: NTUSER |
2 |
|
UserAssist Question #1
|
04 - Registry Artifacts: NTUSER |
2 |
|
NTUSER Question #6
|
04 - Registry Artifacts: NTUSER |
2 |
|
NTUSER Question #5
|
04 - Registry Artifacts: NTUSER |
2 |
|
NTUSER Question #4
|
04 - Registry Artifacts: NTUSER |
2 |
|
NTUSER Question #2
|
04 - Registry Artifacts: NTUSER |
2 |
|
NTUSER Question #1
|
04 - Registry Artifacts: NTUSER |
2 |
|
04 - Registry Artifacts: NTUSER
|
Practical Exercise Introductions |
0 |
|
System Question #1
|
03 - Registry Artifacts: SYSTEM |
2 |
|
System Question #6
|
03 - Registry Artifacts: SYSTEM |
2 |
|
System Question #5
|
03 - Registry Artifacts: SYSTEM |
2 |
|
System Question #4
|
03 - Registry Artifacts: SYSTEM |
2 |
|
System Question #3
|
03 - Registry Artifacts: SYSTEM |
2 |
|
System Question #2
|
03 - Registry Artifacts: SYSTEM |
2 |
|
03 - Registry Artifacts: SYSTEM
|
Practical Exercise Introductions |
0 |
|
Software Question #1
|
02 - Registry Artifacts: SOFTWARE |
2 |
|
Software Question #5
|
02 - Registry Artifacts: SOFTWARE |
2 |
|
Software Question #4
|
02 - Registry Artifacts: SOFTWARE |
2 |
|
Software Question #3
|
02 - Registry Artifacts: SOFTWARE |
2 |
|
Software Question #2
|
02 - Registry Artifacts: SOFTWARE |
2 |
|
02 - Registry Artifacts: SOFTWARE
|
Practical Exercise Introductions |
0 |
|
SAM Question #7
|
01 - Registry Artifacts: SAM |
2 |
|
SAM Question #6
|
01 - Registry Artifacts: SAM |
2 |
|
SAM Question #5
|
01 - Registry Artifacts: SAM |
2 |
|
SAM Question #4
|
01 - Registry Artifacts: SAM |
2 |
|
SAM Question #3
|
01 - Registry Artifacts: SAM |
2 |
|
SAM Question #2
|
01 - Registry Artifacts: SAM |
2 |
|
SAM Question #1
|
01 - Registry Artifacts: SAM |
2 |
|
01 - Registry Artifacts: SAM
|
Practical Exercise Introductions |
0 |
|
00 - Practical Exercise Scenario
|
Practical Exercise Introductions |
0 |
|
Open Class
|
Beginning of Class |
1 |
|