• Coventry University logo

Volume Shadow Copy, Memory and Remote Evidence

Gain the knowledge that will allow you to use Volume Shadow Copy (VSC) and related tools to conduct advanced data analysis.

Volume Shadow Copy, Memory and Remote Evidence
  • Duration

    2 weeks
  • Weekly study

    6 hours

Master key additional components that enhance a user’s ability to analyse data

This course aims to give you a solid and practical bank of knowledge that will allow you to use VSC to conduct thorough and advanced data analysis.

During the course, you will learn how VSC actually works, what information it can help you to find, how to use Forensic Toolkit (FTK) to process a restore point, visualisation of data, distributed processing, Cerberus, adding remote evidence and memory analysis.

What topics will you cover?

  • First In First Out (FIFO) file deletion
  • How to retrieve deleted files using VSC
  • Visualisation as a timelining tool
  • RDMS using Secure Socket Layer (SSL) encryption
  • Distributed processing
  • Cerebus analysis
  • Threat and static analysis
  • Memory analysis
  • Volatile data

Learning on this course

You can take this self-guided course and learn at your own pace. On every step of the course you can meet other learners, share your ideas and join in with active discussions in the comments.

What will you achieve?

By the end of the course, you‘ll be able to...

  • Apply the knowledge and skills necessary to install, configure and effectively use Forensic Toolkit (FTK), FTK Imager, Password Recovery Toolkit (PRTK) and Registry Viewer
  • Evaluate AccessData products to conduct forensic investigations on Microsoft Windows systems and learn where and how to locate system artefacts
  • Synthesise the knowledge gained and practical skills acquired in using the various forensic tools to exploit advanced processing options

Who is the course for?

MSc Cyber Security students who want to increase their knowledge of how to conduct advanced data analysis.

Please note that the staff described in the ‘Who will you learn with?’ section below may be subject to change.

Who will you learn with?

Bob lectures on a BSc under-graduate degree course in Ethical Hacking and the MSc courses: CyberSecurity & Forensic Computing for which he is the Course Director. Bob was a police officer for 30 yrs.

Who developed the course?

Coventry University

Coventry secured gold in the UK Government’s 2017 Teaching Excellence Framework (TEF) and is University of the Year for Student Experience in The Times & The Sunday Times Good University Guide 2019.

  • Established

  • Location


Learning on FutureLearn

Your learning, your rules

  • Courses are split into weeks, activities, and steps, but you can complete them as quickly or slowly as you like
  • Learn through a mix of bite-sized videos, long- and short-form articles, audio, and practical activities
  • Stay motivated by using the Progress page to keep track of your step completion and assessment scores

Join a global classroom

  • Experience the power of social learning, and get inspired by an international network of learners
  • Share ideas with your peers and course educators on every step of the course
  • Join the conversation by reading, @ing, liking, bookmarking, and replying to comments from others

Map your progress

  • As you work through the course, use notifications and the Progress page to guide your learning
  • Whenever you’re ready, mark each step as complete, you’re in control

Want to know more about learning on FutureLearn? Using FutureLearn