The Virtualization Forensics Examiner course tackles two challenging areas facing IT security professionals today: incident response and virtualization. Forensics is at the heart of incident response, and therefore this training will focus on how to gather evidence relating to an incident – the what, when, where, who and why of an incident. Then, the course will take a deep dive into virtual infrastructure and will allow a clear demonstration of the forensically relevant differences between virtual and physical environments. Finally, this course will use hands-on labs to demonstrate how to examine relevant components of a virtual infrastructure. At the close of this course, you will be able to apply forensically sound best practice techniques within a virtual infrastructure.