BASIC FORENSIC INVESTIGATION OF MICROSOFT BASED NETWORKS

Each day is designed to allow the student to understand the structure of the network system and then practically apply this knowledge through practical exercise.

Microsoft Networks Course Outline

Day 1

• Course overview
• The Windows Domain model
• The Windows Domain Controller
• Windows Domain components and interfaces
• Architecture review of case study used in course
• Examination of the Domain Controller
• Overview of Terminal Services
• Administration and configuration of Terminal Services
• Examination of Terminal Servers

Day 2

• Overview of Internet Information Server
• File access capabilities of IIS
• Directory structure of IIS
• Database access capabilities of IIS
• Administration and configuration of IIS
• Virtualization via IIS and it's relation to where evidence resides
• Access to IIS
• IIS publishing
• Examination of Internet Information Server

Day 3

• Overview of Exchange Server
• Exchange Server requirements
• Administration interface / configuration options and how it relates to where -evidence resides
• Examination of Exchange Server

Day 4

• Overview of Microsoft SQL Server
• SQL Server interface with other systems
• Access to SQL Server
• File locations
• Mounting database files for examination
• Examination of SQL Server

Day 5

• Overview of Internet Security and Acceleration Server
• Installation modes and how they affect functionality
• ISA infrastructure
• ISA interface
• ISA publishing configurations
• Examination of ISA Server
• Test