Back to All Events

NW3C Windows Artifacts (WinArt)

The New Jersey Cybersecurity & Communications Integration Cells (NJCCIC) is sponsoring a National White Collar Crime Center (NW3C) training course titled Windows Artifacts. This course covers the identification and extraction of artifacts associated with the current versions of Microsoft Windows operating systems (Vista through Windows 10) and the NT file system. Topics include the change journal, BitLocker, and a detailed examination of the various artifacts found in each of the registry hive files. Students examine event logs, volume shadow copies, link files, and thumbnails. This course uses a mixture of lecture, discussion, demonstration, and hands-on exercises.

NW3C is a nonprofit, membership-affiliated organization comprised of state, local, federal and tribal law enforcement and prosecutorial and regulatory agencies. There is NO COST to participate.

Targeted audience: State, local, and tribal law enforcement agencies/organizations and personnel who’s role is required to serve search warrants and conduct forensics on-scene or network intrusion investigations.

Please note that this course may require a set of prerequisites that must be met before being approved to attend.


  • CC 201 – Digital Evidence Examination and Processing (DEEP) classroom course
  • Equivalent training and/or experience may substitute for the prerequisite

Registration and Details: