Module 1

Course content

1. 1.(W00) Course Instructions

Module 2

Pre-Course Materials

1. 1.(W25M00) Pre-Course Materials - Introductory concepts
2. 2.(W25M00) Pre-Course Materials - Introduction to Rekall
3. 3.(W25M00) Pre-Course Materials - Rekall Basic Usage

Module 3

Module 1

1. 1.(W25M01) Configuring your Windows Environment
2. 2.(W25M02) Configuring your Linux Environment

Module 4

Module 2

1. 1.(W25M03) Rekall Memory Forensics Framework Command Use (Windows) p. I
2. 2.(W25M04) Rekall Memory Forensics Framework Command Use (Windows) p. II
3. 3.(W25M05) Forum Discussion: Forensic live analysis using aff4 file format

Module 5

Module 3

1. 1.(W25M06) Rekall and Volatility differences
2. 2.(W25M07) Module 3 Video
3. 3.(W25M08) Additional Reading and Downloads

Module 6

Module 4

1. 1.(W25M09) The evil inside a Windows machine - module notes
2. 2.(W25M10) Module 4 Instructional Videos
3. 3.(W25M11) Module 4 Memory Image Downloads

Module 7

Final Quiz and Course Wrap-Up