This course is for any analyst or threat hunter who will utilize CrowdStrike Falcon® Forensics to collect on-disk artifacts to perform host-based investigations. This course utilizes Falcon Forensics to perform basic investigations using various dashboards. Course participants will learn about the forensic data collected, basic Splunk syntax and searches related to investigations.