Microsoft Vista has been on the market for two years now. Computer Forensic Investigators are starting to see more and more Vista machines that are submitted for examination. This course presents all the changes and challenges that investigators will face when conducting a forensic examination on Windows Vista workstations. Topics covered:

· Incident Response considerations

· Vista BitLocker

· Memory Collection

· File System Changes

· Registry changes

· Volume Shadow Copies

· Event Logs

· Windows Passwords

· New recycle bin format

· New Windows eMail client

For more information, contact a BitSec training professional toll free at (877) 272-1417 or by email at info(at)bitsecforensics(dot)com.