The Advanced Windows Forensics Professional training program is designed to help build a comprehensive understanding of digital forensics in Microsoft Windows operating systems. This program aims to equip its participants with the necessary skills to recover, analyze and authenticate forensic data, track user activity on the network, and organize findings for use in incident response, internal investigations, intellectual property theft inquiries, and civil or criminal litigation.

This training program is also intended to help participants validate security tools, enhance vulnerability assessments, identify insider threats, track hackers, and improve security policies. The program includes detailed and real-world exercises to teach the tools and techniques that every investigator should employ step-by-step to solve a forensic case.

By the end of this training, participants will be familiar with all aspects of Windows forensics. They will be able to perform live analysis, capture volatile data, make images of media, analyze filesystems, analyze network traffic, analyze files, perform memory analysis, and analyze malware for a Windows subject on a Linux system, using readily available tools. Participants will also gain an in-depth understanding of how Windows works under the covers.