Membership

Windows 10 Live Analysis Using Sysinternals (W26)

Use Sysinternals to explore live Windows 10 systems. Examine processes, services, and handles as sources of investigative information. This is an earlier course edition; examples reflect the tools and versions used when it was recorded.

Instructor · Dr. Paulo Henrique

Modules:
4
Lessons:
17

eForensics learning

Practical skills.
Verified progress.

What you'll learn

  • Examine Windows processes, services, and handles.
  • Use Sysinternals tools for live-system analysis.
  • Interpret tool output from a forensic perspective.

Prerequisites

Basic understanding of Windows processes, services, and handles. The course uses Sysinternals and basic C examples.

Module 3

Module 1

  1. 1. (W26M09) Windows 10 Process Explorer 1 - Video Lecture

  2. 2. (W26M10) Windows 10 Process Explorer 2 - Video Lecture

  3. 3. (W26M11) Sigcheck - Video Lecture

  4. 4. (W26M12) Process Explorer Exercise

  5. 5. (W26M18) Module 1 Forum discussion

Assessments

Assignment Required

(W26A01) Module 1 Lab 1: Using Process Explorer to analyze a Windows 10 host

Assignment Required

(W26A02) Module 1 Lab 2: Auditing unsigned processes

Assignment Required

(W26A03) Module 1 Lab 3: Dumping unsigned processes

Assignment Required

(W26A04) Module 1 Lab 4: Using Process Explorer to analyze a packed image

Assignment Required

(W26A05) Module 1 Lab 5: Using Procdump to dump a process

Module 4

Module 2

Lessons will appear here after course content is added.

Assessments

Assignment Required

(W26A06) Module 2 Lab 1 - Windows XP I

Assignment Required

(W26A07) Module 2 Lab 2 – Windows XP II

Assignment Required

(W26A08) Module 2 Lab 3 – Windows 7

Assignment Required

(W26A09) Module 2 Lab 4 - Windows 10

Module 6

Module 4

Lessons will appear here after course content is added.

Assessments

Assignment Required

(W26A11) Final Lab - Part I

Assignment Required

(W26A12) Final Lab - Part II

Assignment Required

(W26A13) Final Lab - Part III

Quiz Required

(W26Q01) Windows 10 Live Analysis with Sysinternals Final Exam

Course access

Unlock Windows 10 Live Analysis Using Sysinternals (W26).

Enter your email. We’ll send a sign-in code here without taking you away from this course.