38/2022/ONS: Cybercrime - Advanced Windows file systems forensics

The aim of this activity is to enhance cyber forensics works of forensic experts by providing computer forensics practitioners with detailed knowledge on the recovery of investigation items from file systems and by allowing them to explain forensic tools reports and conduct searches beyond usual reported traces in order to establish a trace history, and potential use of anti-forensics.