Schedule

Loading Events

« All Events

  • This event has passed.

Windows 10 Forensic Artifacts

July 7 @ 12:00pm - 1:00pm CDT

Free

Technical Track

This session will explore the digital forensic artifacts found in Windows 10 that can be used in post-incident analysis or computer investigation. It will include where the artifacts are located on disk, as well as analysis techniques, and suggestions for preservation. Highlights will be sync data, Cortana, System Resource Usage Monitor (SRUM), Timeline, Windows Registry, and common logs.

What attendees will learn

  • Know which artifacts might be present
  • How to locate and analyze artifacts
  • Learn how to preserve artifacts when extracting them

Presenter

Chad R. Johnson

Information Security Officer,
University of Wisconsin–Stevens Point

Moderator

Tim Bohn

Watch presentation on Kaltura
Register for upcoming presentations

Details

Date:
July 7
Time:
12:00pm - 1:00pm CDT
Cost:
Free
Event Categories:
,