This course provides attendees with the skills to parse and use analysis techniques on registry data, volume shadow service, random access memory, zip file structures, prefetch, and SQLite content.