What is Nuix?
At the heart of many of the world’s most critical issues lies the need to investigate digital information. Terrorists, state-sponsored hackers, organised crime gangs, paedophiles, white-collar criminals and good old-fashioned thugs are using technology in smarter, sneakier and more aggressive ways. Regardless of the size, scope or nature of the situation, dealing with these issues requires timely answers to the basic questions: who, what, where, why, when and how.
The Nuix Engine makes it possible to gather all available evidence together and process it with speed and reliability far exceeding that of traditional forensics tools. Our content-based forensic triage methodology enables investigators to quickly zero in on the most relevant evidence and our Investigator Lab product makes it possible to conduct truly collaborative investigations.
Nuix’s advanced digital investigation tools were designed by investigators for investigators. This digital forensics software is engineered to triage, process, analyse and bring to the surface critical facts across vast amounts of evidence. This software helps streamline a complex and long task, ensuring you get the results you need faster.
Nuix Windows Investigations is a three-day classroom-based training course designed for investigators with previous experience in the Nuix Investigator tool. It covers advanced techniques for using Nuix Investigator and third-party utilities to identify, analyse and report on common artefacts of user activity on Microsoft Windows systems.
This training course will examine how Windows stores information in the Windows Registry, the recycle bin, recent items, user directories and system folders in all versions of Windows from XP to 8. It will include a detailed look at email including how to identify, sort, search and deduplicate it. Students will also learn how Internet Explorer stores browser history, cookies, temp files and user settings, and gain an in-depth understanding of link files, prefetch files and metadata for files, Word documents and images.
To obtain the maximum benefit from this class, you should be able to perform basic operations on a personal computer and be familiar with the Microsoft Windows environment and have 6 months experience in forensic examinations.
Who should attend?
Digital Forensic Officers, Analysts and Investigators
- review the Nuix Investigator interface and functions
- look at Windows on-disk data structures and security features in Windows 7 and 8
- understand the recycle bin and how to recover deleted files and metadata
- view and analyse Windows event logs
- explore link and jump files
- process, sort, search and tag emails
- explore Windows registry and extract basic artifacts from each registry file
- process history from an Internet Explorer web browser
- define metadata and understand how Nuix processes metadata
- discover the prefetch function in Windows and what forensic value can be obtained from it
- the class includes hands-on lab exercises that allow students to apply what they have learned during the lecture phases
14th – 16th February 2017
23rd – 25th May 2017
CCL Training Academy- Stratford Upon Avon
£1643 + VAT (per person)
How to book
Booking for this course will be done directly through the CCL Training Academy.
Places will be allocated on a first come, first served basis and we reserve the right to cancel this course if we do not secure a minimum number of delegates.