- Course
Digital Forensics: Recover System Artifacts
This course will teach you how to acquire, identify, and recover deleted artifacts within a forensic investigation.
Intermediate
- Course
Digital Forensics: Recover System Artifacts
This course will teach you how to acquire, identify, and recover deleted artifacts within a forensic investigation.
Intermediate
Get started today
Access this course and other top-rated tech content with one of our business plans.
Try this course for free
Access this course and other top-rated tech content with one of our individual plans.
This course is included in the libraries shown below:
- Security
What you'll learn
Deleted files can hold critical evidence in a digital investigation—but recovering them requires precision and the right approach. In this course, Digital Forensics: Recover System Artifacts, you’ll gain the ability to recover deleted files and analyze system artifacts to support forensic investigations. First, you’ll explore how to recover deleted files from various types of storage media. Next, you’ll discover how to analyze Windows file system artifacts and apply validation processes. Finally, you’ll learn how to restore and validate deleted files for use in forensic analysis. When you’re finished with this course, you’ll have the skills and knowledge needed to enhance digital forensic investigations involving deleted or hidden system artifacts.
Digital Forensics: Recover System Artifacts
Intermediate
Table of contents
Phil Chapman is a senior instructor. He is responsible for the delivery of a range of courses including official Microsoft, CompTIA, EC Council and BCS official certifications. He is also the subject matter expert and project lead for the bespoke Law Enforcement Cyber Security training packages which are delivered to UK Law Enforcement agencies and forces.
