Register For Webinar: Casting A Wider Net—Analysis Phase, Part II

Part II of the analysis phase involves telling the story of the evidence; connecting the dots between all the relevant data found. If phase I of the investigation did not turn up evidence, then this phase will be an expansion of the methods used in the last session. We will cast a wider net and go wider and deeper into our investigation. In this masters class, you’ll learn:

·        How to figure out where the files came from, if they were changed, and when things happened to build a timeline of events.

·        When to expand the investigation to find more evidence with diverse processing of artifacts and searching for deleted content.

If you’d like to register for or view courses 1-3 on demand, visit:

Date: September 8th 
Time: 11am CT
Speaker: Justin Tolman

Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.

Unsubscribe any time. We respect your privacy - read our privacy policy.

Register here.

Leave a Comment

Latest Videos

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feeds settings page to add an API key after following these instructions.

Latest Articles