In this course, you will start by analyzing artifacts at the OS level. Specifically, this section dives deeply into the Windows OS and its artifacts. The location of each artifact, the tools needed for their analysis and the knowledge to translate tool results into answers are all documented in this section. You will also dive into to the world of networks in this section. You will start by understanding what network traffic is, what are the main network protocols and how to acquire traffic. Finally, you will get familiar with the tools and techniques required to analyze not only network traffic but different network attack as well.

This course is part of the Digital Forensics Professional Learning path which prepares you for the eCDFP exam and certification