| Before the course |
|
(W00) Course Instructions |
|
00:00:00 |
| Module 1 |
|
(W52M01) The NET Framework |
|
00:00:00 |
|
(W52M02) Powershell Terminology |
|
00:00:00 |
|
(W52M03) Using PowerShell |
|
00:00:00 |
|
(W52M04) PowerShell Gallery Demonstration |
|
00:00:00 |
|
(W52M05) PSGallery - Simulation Exercise |
|
00:00:00 |
|
(W52M06) Services and Processes - Simulation Exercise |
|
00:00:00 |
|
(W52M07) Services and Processes - Simulation Exercise |
|
00:00:00 |
|
(W52M08) Forensic cases suited for using PowerShell |
|
00:00:00 |
|
(W52M09) Cmdlets to Scripting |
|
00:00:00 |
|
(W52M10) Shares Simulation Exercise |
|
00:00:00 |
|
(W52M11) Shares Simulation Assessment |
|
00:00:00 |
|
(W52M12) Advanced Functions |
|
00:00:00 |
|
(W52M13) Advanced Functions - Simulation Exercise |
|
00:00:00 |
|
(W52M14) Advanced Functions - Simulation Assessment |
|
00:00:00 |
|
(W52M15) Desired State Configuration |
|
00:00:00 |
|
(W52M16) DSC - Simulation Exercise |
|
00:00:00 |
|
(W52M17) DSC - Simuation Assessment |
|
00:00:00 |
|
(W52M18) Integrating with other tools |
|
00:00:00 |
|
(W52M19) Extract Registry Hive - Simulation Exercise |
|
00:00:00 |
|
(W52M20) Extract Regustry Hive Simulation Assessment |
|
00:00:00 |
|
(W52M21) EvidenceOfExecution - Simulation Exercise |
|
00:00:00 |
|
(W52M22) EvidenceOfExecution - Simulation Assessment |
|
00:00:00 |
|
(W52Q01) Module 1 Quiz |
|
00:20:00 |
| Module 2 |
|
(W52M23) Installed Software |
|
00:00:00 |
|
(W52M24) Installed Software - Simulation |
|
00:00:00 |
|
(W52M25) Running Applications |
|
00:00:00 |
|
(W52M26) Running Applications - Simulation |
|
00:00:00 |
|
(W52M27) Services |
|
00:00:00 |
|
(W52M28) Services - Simulation |
|
00:00:00 |
|
(W52M29) User Accounts Details |
|
00:00:00 |
|
(W52M30) User Accounts Details - Simulation |
|
00:00:00 |
|
(W52M31) Network Activity |
|
00:00:00 |
|
(W52M32) Network Activity - Simulation |
|
00:00:00 |
|
(W52M33) Running Processes |
|
00:00:00 |
|
(W52M34) Processes - Simulation |
|
00:00:00 |
|
(W52M35) Hashing |
|
00:00:00 |
|
(W52M36) Get Flash - Demonstration |
|
00:00:00 |
|
(W52M37) PowerShell Imaging |
|
00:00:00 |
|
(W52M38) New VHDX |
|
00:00:00 |
|
(W52M39) New VHD |
|
00:00:00 |
|
(W52M40) WIM - Simulation |
|
00:00:00 |
|
(W52M41) Other scripting languages |
|
00:00:00 |
|
(W52M42) VBScript - Simulation |
|
00:00:00 |
|
(W52M43) JavaScript Simulation |
|
00:00:00 |
|
(W52M44) PowerShell on a network |
|
00:00:00 |
|
(W52M45) Calling functions |
|
00:00:00 |
|
(W52M46) Importing |
|
00:00:00 |
|
(W52M47) Network information - Simulation |
|
00:00:00 |
|
(W52A01) Module 2 Knowledge Check |
UNLIMITED |
| Module 3 |
|
(W52M48) Benefits and considerations |
|
00:00:00 |
|
(W52M49) PowerShell Use Cases |
|
00:00:00 |
|
(W52M50) Live Analysis Script Demonstration |
|
00:00:00 |
|
(W52M51) Legal Ramifications |
|
00:00:00 |
|
(W52Q02) Module 3 Knowledge Check |
|
00:15:00 |
| Module 4 |
|
(W52M52) Testing and Validation |
|
00:00:00 |
|
(W52M53) Preserving Data in PowerShell |
|
00:00:00 |
|
(W52M54) Keeping Data Unaltered |
|
00:00:00 |
|
(W52M55) Imaging and Hashing Confirmation |
|
00:00:00 |
|
(W52M56) Script to Executable - Demonstration |
|
00:00:00 |
|
(W52M57) Certifying PowerShell and Scripting |
|
00:00:00 |
|
(W52M58) Module Design - Demonstration |
|
00:00:00 |
|
(W52M59) Real World Relevant Case Example |
|
00:00:00 |
|
(W52Q03) Module 4 Knowledge Check |
|
00:15:00 |
| Final Exam |
|
(W52Q04) Final Exam |
|
00:45:00 |
| Course complete! |