• Online, Instructor-Led
Course Description

Windows uses Shadow Copies to create backup file copies or snapshots of machine files or volumes, even when in use. These copies could be the answer to your ransomware problem, allowing you to recover encrypted or corrupted data from a machine or your network. In this lab you will gain a master level understanding of shadow copies and learn how to use shadow copies in response to malicious activity.

Learning Objectives

Train analysts in maintaining systems shadow copies to use them in case of malicious activity

Framework Connections

The materials within this course focus on the Knowledge Skills and Abilities (KSAs) identified within the Specialty Areas listed below. Click to view Specialty Area details within the interactive National Cybersecurity Workforce Framework.