• Online, Instructor-Led
Course Description

Windows uses Shadow Copies to create backup file copies or snapshots of machine files or volumes, even when in use. These copies could be the answer to your ransomware problem, allowing you to recover encrypted or corrupted data from a machine or your network. In this lab you will gain a master level understanding of shadow copies and learn how to use shadow copies in response to malicious activity.

Learning Objectives

Train analysts in maintaining systems shadow copies to use them in case of malicious activity

Framework Connections

The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):

Specialty Areas

  • Cyber Operations
  • Exploitation Analysis
  • Knowledge Management