Microsoft Corporation - Developing a Fundamental Computer Investigation Process for Windows
Thursday, April 12, 2007 | 9:30AM–10:30AM | Colorado G
Session Type:
Professional Development
This session will introduce a multiphase model based on well-accepted procedures in the computer investigation community. We will also discuss the use of Windows Sysinternals tools (advanced utilities that can be used to examine Windows•based computers) as well commonly available Windows commands and tools to assist in the investigation process.