Digital Forensics and Incident Response - Tactical Edition

Digital Forensics and Incident Response are the key fields that enable organizations to combat modern threats - whether they come from attackers across the world or from a disgruntled employee in the accounting department. In this course, students will learn how to analyze a wide range of activity across Windows systems, including malware execution, anti-forensics tampering, exfiltration of sensitive data, and more. To track these activities, students will learn how to locate and analyze over twenty artifact types that are commonly found on Windows systems. The skills learned are immediately usable in the field, whether students are digital forensics investigators, incident response handlers, network administrators, or IT managers who want to understand these technical processes. The 4-day version of this course has sold out for the last seven years and has been consistently highly rated, and we are excited to offer the 2-day, tactical version at Black Hat this year.