Training Course:EnCase v6 Computer Forensics I (Certificate)School/Trainer:Dimension Data Learning Solutions
Adelaide, Brisbane, Canberra, Melbourne, Perth, Syndey, Australia
Course Format: Classroom | E-learning | Virtual Class | Online | On-site | Blended | Self-paced
Course Description:
'' This course is sourced from Guidance Software who are the leader in Computer Forensics and Incident Response Solutions.
This live, hands-on course involves practical exercises and real-life simulations. The class provides participants with an understanding of the proper handling of digital evidence from the initial seizure of the computer/media to acquisition, and then progresses to the analysis of the data. It concludes with archiving and validating the data.
Skills Gained: After attending the "Introduction to Computer Forensics" course, you will have a clear understanding of computer forensics and computer evidence. You will also have a basic understanding of the "EnCase Computer Forensic Methodology".
Key Topics: Day one provides an understanding of the proper handling of digital evidence from seizure to acquisition. Students receive a basic overview of how computers function, as well as what constitutes digital evidence.
* EnCase Concepts
* What Constitutes Digital Evidence
* How Computers Work
* EnCase Navigation
* Diskette Preview/Acquisition
Day two begins with a discussion of the FAT file systems as well as an overview of the NT file system. Hard disk acquisition is covered, using both a forensically sound boot diskette, as well as a hardware write blocking device. Attendees will learn how to properly preview a computer system prior to acquisition, as well as explore keyword searching and bookmarking of relevant data.
* NTFS/FAT File Systems
* Creating a Boot Disk
* Hard Drive Preview and Acquisitions
* Creation of Keywords and Searching
* Bookmarking/Preserving Findings
Day three includes more complex bookmarking of data, and examination of file signatures to accurately identify file types. Attendees will install external viewers within EnCase and learn how to copy data from within an evidence file. Students learn how to restore an evidence file back to physical media and reacquire an evidence file with different options.
* File Types
* Bookmarking Techniques
* Signature Analysis
* Installing External Viewers
* Copy/Unerase Options
* Restoring Evidence
* Reacquiring an Evidence File
Day four explores how to archive a completed case, as well as how to reopen this case if needed in the future. Attendees will observe how EnCase can detect and identify any changes to the content of an evidence file, as well as take a detailed look at the Timeline view within EnCase. Pertinent areas of interest within the Windows operating system and user accounts are explored as well as locating data in unallocated space.
* Archiving/Reopening an Archived Case
* Verification of Evidence File
* Timeline
* Windows Artifacts
* Searching Unallocated Space
...''
Elements of this syllabus are subject to change.
Please go to the school's official website for training price and schedule:
http://www.ddls.com.au/
Phone:13 12 01 / 08 8236 8200
School Address:
Level 7
553 Hay St
Perth WA 6000
Level 4, PKF House
139 Frome St
Adelaide 5000
Level 10, Thakral House
301 George St
Sydney 2000
Level 3, Dimension Data Building
11-17 Dorcas St
South Melbourne 3205
Level 12
307 Queen St
Brisbane 4000
Jobs & Resumes: Adelaide, Brisbane, Canberra, Melbourne, Perth, Syndey
Houses & Roommates: Adelaide, Brisbane, Canberra, Melbourne, Perth, Syndey
Travel Agencies: Brisbane, Melbourne, Perth,
Search other schools for EnCase v6 Computer Forensics I training resources.
Other training courses offered by Dimension Data Learning Solutions:
Citrix Access Suite 4.0: Build/Test Workshop
CompTIA A+ Certification Essentials Support Skills
CompTIA A+ Certification Electives
Practical Digital Evidence Gathering
EnCase v6 NTFS
EnCase v6 Network Intrusion Investigations
EnCase v6 Advanced Internet Examinations
EnCase v6 Advanced Computer Forensics
EnCase v6 Computer Forensics II
EnCase v6 FIM/Mobile Use of EE Live Forensics
D8750/760/770 IBM Lotus Domino R8 - System Administrator
D8720 Exploring New Features in IBM Lotus Domino 8 Administration
Exploring New Features in IBM Lotus Domino Designer 8
Fundamentals of IBM Lotus Domino 8 Application Development
Building Web Applications with IBM Lotus Domino Designer 8
Using LotusScript in IBM Lotus Domino 7 Applications
ITIL v2-v3 Bridging
ITIL V3 Service Capability �Operational Support & Analysis
Notice: The course description on this page was captured from the Internet as historical reference or submitted by visitors. It was archived statically and not updated from day to day.
Tips:
Our combined search function does not only provide you with the training courses and students, but also talent resumes and jobs, or shared apartments nearby for rent. |
|
|
