Windows Forensic

Windows Forensic

Course ID: QHA2100

Duration: 24 Hours

Certification Name: Quick Heal Academy’s Programme on Windows Forensic

 12,980.00 (Inclusive of all taxes)


About Programme

As most of the organization uses Windows Operating System and as there is increase in breaches. A specialized course was required to train professionals into windows forensics. Here is a specialized course which targets performing Windows which focuses only on the collection and finding the evidence from the machines running Windows Operating System and details that needs to be recovered for the successful completion without missing the evidence; getting evidence admissible in the courtroom.

Do you work at the organization where all the machines are running windows machines? This course will be helpful in case of threat in the organization or cyber-attack. A person with this course would be able to respond as a first responder and incident can be contained as the earliest. This course will be helpful to start a career as Incident Responder/ Handler.


Highlights of the programme

  1. Learning to detect how and when breach has occurred.
  2. Identifying compromised and affected windows systems.
  3. Determining what attackers took and changed.
  4. Learning to remediate incidents.
  5. Understanding the detailed steps of investigation.
  6. Learning to document the chain of evidence.


Programme Content

  • Understanding Volatile and Non – Volatile Data
  • Collecting Volatile and Non-Volatile Data
  • Windows File System analysis
  • Recycle Bin and Windows System File Analysis
  • Windows Memory analysis
  • Windows Registry analysis
  • Analysing Internet Artifacts
  • Methodology of Log Analysis
  • Tools and Techniques to Break Password

Certificate to highlight the knowledge and skills you gain

Official and Verified

Receive an instructor-signed certificate with the institution’s logo to verify your achievement and increase your job prospects

Easily Shareable

Add the certificate to your CV or resume, or post it directly on LinkedIn

Proven Motivator

Give yourself an additional incentive to complete the course

Additional Information


  • Anyone who has a sound technical knowledge, is a fast learner, good analytical thinking OR having basic knowledge of Windows Operating System.

Laptop Requirements

  • Processor – Intel i3 or above
  • RAM minimum – 4gb
  • HDD space minimum – 10GB
  • 1 Virtual machine configured with Windows
  • Administrative Rights of the machine



Where this course will be useful?

This course will be useful to anyone who either works on Windows Operating System or works in an organization where most of machines are running Windows Operating System. At the end of this course the participants will be able to recover the mistakenly deleted files.

After this course what could be the next program I should attend?

This course is intermediate and after this course the participant can get enrol to Digital Forensic Investigator or Cyber Crime Investigator.