George Mason University
George Mason University Mason
George Mason University

CFRS 763: Registry Forensics - Windows

Course Information from University Catalog

Not Repeatable


Presents the concepts, tools, and techniques used for forensic collection, identification, and analysis of the Windows registry; review the structure and layout of the Windows registry and be introduced to the types of artifacts that can be found within; evaluate and interpret data from the Windows registry with emphasis on hand-on exercises.

When Offered: Fall, Spring

Hours of Lecture or Seminar per week: 3

Course will consist of exercises conducted in a lab environment with concurrent lectures (combined total of 3 credits for lab and lecture exercises).

Credits: 3

Prerequisites:

CFRS 500, CFRS 661

Expertise