Windows® 10 Forensic Analysis - Advanced | KPMG | SG
Share with your friends

Windows® 10 Forensic Analysis - Advanced

KPMG Cyber Lab, 16 Raffles Quay, Level 3, Hong Leong Building, Singapore 048581

27 August 2018 - 30 August 2018, 9:00AM - 5:30PM, SGT

Course Highlights

  • Learn to use various applications and utilities to successfully identify, process, understand and document numerous Windows® artifacts that are vitally important to forensic investigations
  • Learn how to process Edge browser history, cookies, temp files InPrivate browsing challenges and analysis, BitLocker encryption, Windows® Action Center (Notifications SQLite  Database), Timeline function and other Windows® 10 specific artifacts
  • Gain in-depth knowledge of JumpLists, registry analysis and prefetch files and how they relate to forensic investigations and conclude with an in-depth look into OneDrive and synchronisation processes between trusted devices
  • Attendees will use a variety of open source and leading forensic applications to examine key artifacts through multiple hands on labs and practicals


Course Outline

  • Windows® 10 Artifact Overview
  • Windows® System Artifacts
  • BitLocker Encryption  
  • Windows® Registry
  • Windows® Shortcuts
  • Windows® Immersive Applications review
  • OneDrive – Cloud Synchronization
  • Windows®  10 Notifications
  • Windows® 10 Timeline
  • Cortana Integration
  • Edge Browser Forensics
  • Windows®  10 Mail
  • Photo’s Application Artifacts



Rob is an accomplished instructor who develops course content for the digital investigations community that is delivered across the globe to state and local law enforcement personnel, ensuring the curriculum and delivery concepts are of the highest standards within the industry. He is an author and contributor to the production of customized courses tailored for digital forensic practitioners and corporate entities. Rob leads the research into forensic artifacts found on various digital devices and regularly presents his findings at international conferences.

Rob has over a decade of experience developing and presenting training on Digital Forensics, Cyber Security, Mobile Forensics and eDiscovery education programmes for the global digital investigations community, having previously held the positions of Vice President of Training at Cellebrite, Senior Vice President of Global Training at Nuix and Director of Training at AccessData. He has also held positions as a Computer Crime Specialist with the National White Collar Crime Centre, where his primary focus was on research and development of a file system analysis and automated forensic tool curriculum, and with the UK’s Kent Police as a Forensic Computer Analyst.

As a certified member of the International Association of Computer Investigative Specialists (IACIS), Rob instructs regularly at the association’s annual conferences and is a lead instructor for the Advanced Windows Forensic course as well as regularly presenting at the premier international digital forensics conferences such as High Technology Crime Investigation Association, Department of Defence Cyber Crime, F3 Annual Workshops and Internet Crimes against Children taskforce.


Course fees*


$8,910 per participant



$9,900 per participant

*The fee is inclusive of GST at the prevailing rate, course materials, lunch and refreshments.



A 10% discount applies to three or more participants from the same organisation registering for the course.


To register online, please click here


Connect with us


Request for proposal