Live Response and Forensics with PowerShell

Description

Price: 3.00 USD | Size: 300 MB | Duration : 1.45+  Hours

BRAND: Expert TRAINING | ENGLISH | INSTANT DOWNLOAD

Live Response and Forensics with PowerShell 

This course will teach you how to use PowerShell for performing initial security triage on workstations and disk forensics.

What you’ll learn

The ability to perform security triage and forensics can be a daunting task. However, many tools are available to make this process easier, one of which is PowerShell. In this course, Live Response and Forensics with PowerShell, you’ll learn how to use PowerShell to perform initial triage and forensics on a windows workstation. First, you’ll explore PowerShell execution policies and collect system information. Next, you’ll discover how to create a triage script using PowerShell and extra components to investigate the workstation. Finally, you’ll learn how to use the PowerForensics framework to perform disk analysis and create a forensic timeline. When you’re finished with this course, you’ll have the skills and knowledge to use PowerShell for digital forensics needed to perform triage and assist in identifying what happened and potential remediation.

Modules

1. Course Overview

2. Using Execution Policies to Control PowerShell

3. Using PowerShell to Collect System Information

4. Creating a Triage Script to Collect System Information

5. Using PowerForensics to Perform Disk Analysis