BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Plone.org//NONSGML plone.app.event//EN
X-WR-TIMEZONE:US/Eastern
BEGIN:VEVENT
SUMMARY:Windows Artifacts (WINART)
DTSTART;TZID=America/Chicago;VALUE=DATE-TIME:20170613T000500
DTEND;TZID=America/Chicago;VALUE=DATE-TIME:20170613T235500
DTSTAMP;VALUE=DATE-TIME:20260516T204556Z
UID:20ed06e6128a4c048cbdd4a81268714e
CONTACT:https://www.nw3c.org/training
CREATED;VALUE=DATE-TIME:20180718T153106Z
DESCRIPTION:This course covers the identification and extraction of artifa
 cts associated with the current versions of Microsoft Windows operating sy
 stems (Vista through Windows 10) and the NT file system. Topics include th
 e change journal\, BitLocker\, and a detailed examination of the various a
 rtifacts found in each of the registry hive files. Students examine event 
 logs\, volume shadow copies\, link files\, and thumbnails. This course use
 s a mixture of lecture\, discussion\, demonstration\, and hands-on exercis
 es.
LAST-MODIFIED;VALUE=DATE-TIME:20180718T153232Z
LOCATION:Orange County RCFL
URL:https://www.rcfl.gov/orange-county/training-schedule/windows-artifacts
 -winart
END:VEVENT
BEGIN:VTIMEZONE
TZID:America/Chicago
X-LIC-LOCATION:America/Chicago
BEGIN:DAYLIGHT
DTSTART;VALUE=DATE-TIME:20170312T030000
TZNAME:CDT
TZOFFSETFROM:-0600
TZOFFSETTO:-0500
END:DAYLIGHT
END:VTIMEZONE
END:VCALENDAR