Courses by Description

This course is funded through OJJDP. To register for this class, you must be affiliated with an ICAC Task Force. Furthermore, you must agree to comply with the Best Practices and Standards established by ICAC. If you have any questions about the ICAC Best Practices and Standards, please contact your ICAC commander.

This 4 day course is designed to be an introduction to processing issues related to the Windows XP, Windows Vista, and Windows 7 operating systems. Topical areas include a detailed look at the registry, volume shadow copies, thumbnails, event logs, and security. Processing issues such as recovering information from the registry, information from system restore, and methods for gaining operating system access are also addressed.

Prerequisites: Cybercop 101 (BDRA) and Cybercop 201 (IDRA) or the equivalent, with in-field/lab experience.