Windows Vista Technology

Source: www.accessdata.com
Topic: Windows Vista

Short Desciption:
File Structure Changes: Students will learn the mechanics of reparse and mount points in the Windows Vista file structure. ...

 

Content Inside:
Windows Vista TechnologyPage 1 Windows Vista Technology 384 South 400 West Lindon UT 84042 www.accesdata.com Last updated 3/9/07Windows Vista TechnologyForensic Toolkit FTK Imagerand Registry ViewerAdvanced Oneday Instructorled Workshophis advanced AccessDataworkshop provides the knowledge and skillsnecessary to analyze MicrosoftWindows Vistaoperating system artifactsand file system mechanics using Forensic Toolkit(FTK) FTK ImagerPassword Recovery Toolkit(PRTK) and Registry Viewer.During this oneday workshop participants will review the following: GUID Partition Tables. (GPT): Students will use FTK Imager to navigate the new GPT formatted drive partitioning scheme. File Structure Changes: Students will learn the mechanics of reparse and mount points in the Windows Vista file structure. BitLockerFull Volume Encryption (FVE): Students will use FTK Imager and Windows Vista technology to decrypt andacquire a sectorbysector image of an FVE drive. Windows Vista Artifacts such as:oVista EFSUpdated EFS AlgorithmsoRecycle BinUpdated File Recovery MechanicsoPrefetch FilesUpdated SuperFetch StructureoThumbcacheEnhanced Thumbs.db FunctionalityoActivity HistoryLocal Machine and Browser IndicesoLink and Spool FilesStructure and Content ChangesoWindows Event LogsEnhanced XML Output and ViewingoVolume Shadow CopyPrevious File Version Recovery (SVI)oWindows Vista RegistryNTUser.DAT ChangesPSSP MRU and UserAssist ChangesSAM Hive User ChangesDomain and User Value AdditionsSystem USBStor InformationDevice Identification and ProtectionThe workshop includes multiple handson labs that allow students to apply what they have learned in the workshop.PrerequisitesTo obtain the maximum benefit from this workshop attendees should be familiar with: Windows XP forensic analysis Windows NT file system (NTFS) mechanics FTK FTK Imager and Registry ViewerCourse Materials and SoftwareAttendees will receive reference documentation and workshop files.T

 

 

ftk windows forensic thumbs db, accesdata download ftk, userassist forensic, accesdata com, windows xp ovista, latest technology pdf, ftk efs howto, pdf psp windows, manual book windows vista pdf, download taw10 contents