Live Data Acquisition and Analysis - Exclusive BitSec Forensic Course

This hands-on course teaches course participants to recognize, properly seize and analyze the contents of physical memory (RAM) and also volatile system data.

Emphasis is placed on acquiring useful information can be extracted from the collected data as well as correlating that information with the future static forensic process. This includes information from volatile system data and memory dumps, like:
- Running processes
- MFT records
- Documents
- Internet History
- Instant message chats
- Network information and communications
- Logged on users
- Open file handles
- Encrypted containers
- Passwords and Encryption Keys