Membership

PowerShell in Digital Forensics (W52)

Use PowerShell to support digital forensic workflows. Develop scripting skills for examining Windows systems and organizing investigative tasks.

Instructor · David Tatum

Modules:: 6
Lessons:: 67

eForensics learning

Practical skills.
Verified progress.

What you'll learn

Navigate Windows system files with PowerShell.
Use scripting to collect and examine forensic information.
Apply PowerShell concepts to repeatable investigation tasks.

Prerequisites

This course is designed for intermediate to advanced users familiar with operating system internal components, system tools and what scripting is. Advanced Scripting will be covered as well as programming language concepts. The student should be able to research and download various scripts and scripting development environments including Visual Studio Code. Basic text editor understanding and familiarization with the digital forensic process will facilitate course comprehension. Equipment and software: Equipment Windows 10 computer with access to the Internet. The computer should meet the recommended requirements for running Windows 10.

Module 1