|
See
Who we have Trained
Authorized
Training Centers
Student
Discounts
Access
Data
DataLifter
Maresware
InfinaDyne
|
|
|
The course
will cover all aspects of a forensic examination including:
- Forensic ethical
issues.
- Forensic examination
procedures.
- Preparing and
verifying forensically sterile examination media.
- Basic operating
system issues.
- Hardware issues
specific to forensic examinations.
- Basic network
issues.
- The proper methods
to initially acquire or seize the original media and minimize the potential
for the loss or corruption of data.
- How to preserve
the original media and prevent accidental writes to or alteration of the
original media.
- How to find
and recover all of the data on the media including:
- Normal files
- Deleted files
- Hidden files
- Data from formatted
disks
- Encrypted files
- Swap files
- Temporary files
- Data in unused
(unallocated) space that is not linked to a file
- Cache Files
- The various
types of Email files
- Internet cookie
files
- The significance
and determination of the various date and time stamps.
- Data types,
data format conversion and managing data.
- Note taking
and writing good reports.
- A detailed overview of FAT
and NTFS logical structures
- Presenting
the data to the client or attorney in a manner that is clear and understandable.
- How to draw
expert conclusions.
|
|
