Describe the Windows Boot Process in relationship to Forensic Artifacts

Describe the primary components of the Windows Registry Hive

Analyze Windows Registry Hive during a forensic investigation

Perform proper extraction and examination of event log files

Describe the purpose of Windows operating system prefetch files in a forensic examinations

Describe the role of shortcut files in the Windows Operating system and forensic examinations

Integrate proper handling and storage techniques of physical and digital evidence