Computer Forensics

EnCase Computer Forensics I & II Workshop

EnCase v6 Computer Forensics I Oct. 19-22|Nov. 16-19|Dec. 7-10
EnCase v6 Computer Forensics II Nov. 26-29|NOV.23-26|Dec.14-17

ENCASE COMPUTER FORENSICS I
Course fee: Php85,000.00 +12%VAT /person
Inclusive of: Training Materials, Certificate and AM/PM Snack and Lunch) & 32 CPE Credit
Venue: Ground Flr. Unit 107 Beacon Plaza, Shaw Blvd. Cor. Ideal St. Mandaluyong City, Philippines
Level: Introductory
Prerequisites: Basic computer skills. Advance preparation for this course is not required.
Delivery method: Group-Live & Instructor Led, English Language

Course Description: This hands-on course involves practical exercises and real-life simulations. The class provides participants with an understanding of the proper handling of digital evidence from the initial seizure of the computer/media to acquisition, and then progresses to the analysis of the data. It concludes with archiving and validating the data.

FULL COURSE OUTLINE: http://www.guidancesoftware.com/downloads/getpdf.aspx?fl=.pdf

Day 1
Day one starts with an introduction to EnCase® Forensic v6 and examination methodology. Attendees are shown how to use EnCase Forensic to acquire a complete copy of the data from a removable disk in a forensically sound manner. The concept of digital evidence and how computers work (paying particular regard to the associated impact on forensic examination) are also included.
Day 2
Day two expands upon the information provided in day one, and begins with a detailed discussion of the FAT file systems as well as an overview of the NT file system. Hard disk acquisition is covered, using both a forensically sound Linux CD, as well as the use of a hardware write-blocking device.. Attendees will learn how to properly preview a computer system prior to acquisition as well as explore keyword searching and bookmarking of relevant data.
Day 3
Day three includes more complex bookmarking of data. Instruction is given on the use of file signatures to properly identify file types. The principal and practical usage of digital fingerprints (hash value) to identify files of interest and exclude known files is also covered. Attendees will install external viewers within EnCase Forensic and learn how to copy data from within an evidence file. Restoring an evidence file back to physical media is also covered.
Day 4
Day four explores how to reacquire evidence in order to modify evidence-file parameters but still maintain data integrity. Attendees are given advice and guidance for archiving as well as instruction on how to restore and open an archived case. Attendees will observe first hand how EnCase Forensic can detect and identify any changes to the content of an evidence file. Practical instruction will then be given concerning the use of the Timeline viewer within EnCase Forensic and the recovery of deleted data from the unallocated space of a computer disk. Following this the importance of proper evidence handling will be discussed with the attendees being shown examples of good practice in this area.

ENCASE COMPUTER FORENSICS II
Course fee: Php85,000.00 +12%VAT /person
Inclusive of: 12%VAT, Training Materials, Certificate and AM/PM Snack and Lunch) & 32 CPE Credit
Venue: Ground Flr. Unit 107 Beacon Plaza, Shaw Blvd. Cor. Ideal St. Mandaluyong City, Philippines
Level: Introductory

Prerequisites: EnCase® Computer Forensics I. Advance preparation for this course is not required.

Delivery method: Group-Live & Instructor Led, English Language

Course Description: This hands-on course is designed for investigators with strong computer skills, prior computer forensics training, and experience using the EnCase forensic software. This course builds upon the skills covered in the EnCase Computer Forensics I course and enhances the examiner’,s ability to work efficiently through the use of the unique features of EnCase.

Students must understand evidence handling, the structure of the evidence file, creating and using case files, data acquisition methods including DOS based, hardware write protected, crossover cable and disk to disk, recovering deleted files and folders in a FAT environment, keyword searches across logical and physical media, creating and using EnCase bookmarks, file signatures and signature analysis, and locating and understanding Windows® artifacts.

FULL COURSE OUTLINE: http://www.guidancesoftware.com/downloads/getpdf.aspx?fl=.pdf

Day 1
Day one starts with a brief review of working within the EnCase® Forensic v6 environment. Attendees then move on to study the Master Boot Record partitioning model, partition recovery, FAT folder structure, NTFS and FAT folder recovery. Instruction is then provided on the use of the EnCase® Virtual File System (VFS) Module and the EnCase® Physical Disk Emulator (PDE) Module. The attendees are shown how to use these technologies to accomplish tasks outside of the EnCase Forensic environment such as virus scanning and rebuilding the target operating system within a VMware environment. Day one finishes with intermediate-level instruction concerning NTFS and its most important metafile, the Master File Table (MFT).
Day 2
Day two begins with an examination of compound files. Their structures are explored and issues surrounding their examination are discussed in detail. Students move on to exploring a very important type of compound file structure, the Windows Registry hive file. They explore mounting and examining these files and are given instruction on the relationship of the hive files to the structure of the Registry in its on-line state. They then progress to examining the time zone information contained within the Registry, its importance to their case and how they apply it in EnCase Forensic. They then move on to using GREP and text-indexing functionality of EnCase Forensic in order to perform advanced searches. Day two concludes with instruction on how to use EnCase Forensic conditions and queries to filter in information of interest and filter out common data that is of no relevance to the investigation.
Day 3
Day three focuses upon specific analysis of common artifacts that often provide vital information to investigations. These specific areas reveal data that can provide a clearer indication of user activities. We will examine specific artifacts that the operating system creates through the user’s interaction with the computer. Students willexplore the methods that EnCase Forensic provides to examine common email files, Internet history and cache content, Internet bookmarks, print artifacts, as well as the function and content ofthe Windows Recycle Bin.
Day 4
Day four starts with instruction on the recovery and preservation of data from memory sticks, compact flash, XD cards and similar media. A review of the week’s work will reveal a significant volume of data within the class case folders. Students will explore methods to document, organize and prepare a professional, accurate and articulate final report.

ENROLL NOW!

GLOBALKNOWLEDGE PHILIPPINES INC.
Ground Flr. Unit 107 Beacon Plaza, Shaw Blvd. Cor. Ideal St. Mandaluyong City, Philippines
Telephone Nos.: (632) 721-4380 TeleFax No. 724-1891
Email: sandra@globalknowledgeph.com YM: sandra_medalla@yahoo.com URL: www.gkphilippines.com

The Computer Forensics Workshop will give participants the essential skills to identify an intruder’s footprints and to properly gather the necessary evidence to prosecute. Many of today’s top tools of the forensic trade will be taught during this workshop, including software, hardware and specialized techniques.

Presenting you with the up-to-date methodology, knowledge and tools available in the market to identify computer-related crimes in forensically sound manners.

Ideal for individuals belonging to Police, Military and other law enforcoement personnel, E-business Security professionals, Banking, Insurance and other personnel, Systems Administrator, IS & IT Managers...

LUNESYS, in partnership with NETSOL is organizing...
COMPUTER FORENSICS - A TWO-DAYS WORKSHOP

The Computer Forensics Workshop will give participants the essential skills to identify an intruder’s footprints and to properly gather the necessary evidence to prosecute. Many of today’s top tools of the forensic trade will be taught during this workshop, including software, hardware and specialized techniques.

Presenting you with the up-to-date methodology, knowledge and tools available in the market to identify computer-related crimes in forensically sound manners.

Ideal for individuals belonging to Police, Military and other law enforcoement personnel, E-business Security professionals, Banking, Insurance and other personnel, Systems Administrator, IS & IT Managers

This course covers collection, preservation and analysis of digital evidence for presentation in civil and criminal court proceedings. Students receive hands-on experience with tools and procedures used by computer forensics practitioners. Topics include computer investigations, crime scene processing, evidence acquisition and management, data recovery in a variety of OS environments and expert witnessing.

Pages:- 1 2 3 4 5 6 7 8
[ Online / Live ] [ Corporate Training ] [ Locations ] [ Schools ] [ Job Seekers ]

Dear Visitor: You are strongly recommended to bookmark this page and come back later, since new course may be available anytime. Click to Proceed>>