MOREnet Training

MOREnet provides selected training opportunities for its customers. Details about this training can be viewed by selecting links below.

To view Adobe PDF files, you need Adobe Acrobat Reader. Click the Acrobat Reader icon to download the free Reader from the Adobe website.

Course Description

Classes are completed in one day unless a different duration is specified.

Microsoft Windows

• Duration: 3.0 days
• Session times:
  First day:   8:00 a.m. - 5:00 p.m.
  Other days:   8:00 a.m. - 5:00 p.m. (deliverable hours = 24.0)

Description

Windows Client Forensics (Windows Vista): This course will provide students with an understanding of the Windows Vista operating system beyond what the current forensic analysis tools can provide. This course will provide student with the opportunity to have hands on experience with the very technologies that they will be coming up against in an investigation. Topics focus on items such as BitLocker Full Volume Encryption, Volume Shadow Copy, Thumbcache, Recycle bin, Prefetch, Internet Explorer 7, Event Logging, NTFS File System Details, Transactional NTFS, Transactional Registry, File System and Registry Virtualization and Windows Search artifacts.

Prerequisites

Good understanding of the Windows XP and Windows Vista operating systems. Specific knowledge of Windows forensics is beneficial, but not required.

Equipment needed

Participants will need to bring a Vista capable laptop for the lab exercises, and should expect that a fresh installation of the OS will be required. More information will be forthcoming. No OS license purchase will be necessary.

Speaker Bio

Chris Ard is a Senior Consultant in the Microsoft Law Enforcement Support Team. He has worked for Microsoft in various security and investigative roles over the past 9 years. He has earned numerous technical certifications and currently travels throughout the world providing training and consulting services to various law enforcement organizations on both Internet and Cyber investigations as well as Windows Forensics. He is married and has 3 young boys with whom he enjoys working on wood crafts and playing Xbox.

To Enroll

To enroll in this FREE class, send e-mail to training@more.net with a subject line of "Vista Forensics" and include your First name, Last name, Organization name, Email address, Daytime phone number and Evening phone number. Once registered, you will receive a confirmation e-mail from MOREnet Training within one business day. If you do not receive this e-mail, please contact Maegan Bragg in MOREnet Training at (573) 884-7200.