FOR500: Windows Forensic Analysis

• Digital Forensics and Advanced Data Triage
• Registry Analysis, Application Execution, and Cloud Storage Forensics
• Shell Items and Removable Device Profiling
• Email Analysis, Windows Timeline, SRUM, and Event Logs
• Web Browser Forensics

FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response

• Off the Disk and Onto the Wire
• Core Protocols & Log Aggregation/Analysis
• NetFlow and File Access Protocols
• Commercial Tools, Wireless, and Full-Packet Hunting
• Encryption, Protocol Reversing, OPSEC, and Intel