" 1.Gün
•Siber Olay Müdahalesi Kavramlar
•IR İhtiyaçlar Piramidi
•Olay Müdahale Prosedürleri (SANS-NIST)
•Teoremler
•Anormali Tespit Etmek (Windows Process)
2. Gün
•Digital Forensics Basics
•Kavramlar | Imaging | Documentation
•Windows Forensics Basics
•File System Forensics
•Alternate Data Streams
•Windows Execution Artifacts
•KAPE
3. Gün
•Windows Persistency Points
•EDR - Alert&Live Analysis
•Senaryo: Windows Host Analizi"