Module 1

Course content

1. 1.(W00) Course Instructions

Module 2

Introductory Materials

1. 1.(W26M01) General course instructions (please read carefully)
2. 2.(W26M02) Software used in this course
3. 3.(W26M03) Sysinternals Tools
4. 4.(W26M04) Sysinternals Tools
5. 5.(W26M05) Sysinternals and an incident response scenario
6. 6.(W26M06) A Sysinternals tool usage in forensics scenario
7. 7.(W26M07) Windows 10
8. 8.(W26M08) Windows 10 Credential Guard

Module 3

Module 1

1. 1.(W26M09) Windows 10 Process Explorer 1 - Video Lecture
2. 2.(W26M10) Windows 10 Process Explorer 2 - Video Lecture
3. 3.(W26M11) Sigcheck - Video Lecture
4. 4.(W26M12) Process Explorer Exercise
5. 5.(W26M18) Module 1 Forum discussion

Module 4

Module 2

Module 5

Module 3

1. 1.(W26M23) Module 3 Lecture
2. 2.(W26M24) Module 3 Sysmon Lecture I
3. 3.(W26M25) Module 3 Sysmon Lecture II

Module 6

Module 4