EnCase v6 FIM/Mobile Use of EE Live Forensics (Certificate)

Dimension Data Learning Solutions
Adelaide, Brisbane, Canberra, Melbourne, Perth, Syndey, Australia

Course Format: Classroom | E-learning | Virtual Class | Online | On-site | Blended | Self-paced

Course Description:

'' This hands-on course is designed for investigators with significant computer skills who want to expand their knowledge of examining live computers, networks and servers. The class combines forensic examinations with live response in a network environment. Attendees learn to use the Field Intelligence Model (FIM)/Mobile EE software to examine a server to obtain evidence that may exist or be interpreted only while the server or network is running. Attendees also learn how to deploy the FIM/Mobile EE and conduct a forensic examination of a remote computer on the Internet.

Emphasis is placed on the access and acquisition of data from live machines running a variety of operating systems and file systems, and on overcoming myriad obstacles to obtain investigative information.


Skills Gained: Understanding fundamental operations of the FIM/Mobile EE
Servlet pushing technologies: how to deploy the FIM/Mobile EE on servers and networks
Troubleshooting a FIM/Mobile EE deployment
Understanding firewalls
Live RAM investigations
Live forensic Linux examinations
Using the FIM/Mobile EE snapshot—identifying open ports, open files, processes and device logons on a live machine
Public Key Infrastructure and Virtual Private Network
Introduction to cryptology
Examining encrypted volumes
Introduction to hubs, switches, routers and networking
Understanding port numbers and open ports
MAC addresses and their evidentiary significance


Key Topics: Day one provides an understanding of the Field Intelligence Module. Using the Field Intelligence Module product, students will learn how FIM works.
- Field Intelligence Module overview
- Introduction to cryptology
- Building the FIM SAFE
- TCP/IP overview
- FIM/EnCase concepts
- First Response and triage with FIM
- Troubleshooting a FIM deployment
- Preview and Acquire a remote machine

Day two gives the students hands on experience setting up and
using Field Intelligence Module.
- Basic servlet methodology and installation
- FIM deployment on a RAID
- Networking essentials, port forwarding
- Deploying FIM on a network
- Monitor a parolee/probationer in a dynamic IP environment
- Covert FIM deployment from a secure Internet café or public library

Day three builds on the skills previously learned. Students will capture and inspect FIM TCP packets and confirm the ports and encryption in use.
- Capturing and examining encrypted FIM packets
- Examining Windows® registry with FIM
- Examining volatile data with EnCase Snapshot
- Discover hidden processes/root kits
- Deploy FIM without logon credentials
- Examination of encrypted volumes

Day four addresses the examination of Linux and Unix systems. Students will learn advanced servlet pushing technologies. Students will learn how to combine all discoveries into a readable, coherent report using FIM. They will also perform a final practical exercise within the given scenario to summarize the week’s instruction.
- Creating Logical Evidence files with FIM
- Using FIM to examine Linux and Unix
- Advanced servlet pushing technologies
- Using FIM to prepare a written report within the EnCase interface and exporting this report in HTML or other formats.
- Comprehensive practical exam

...''

Elements of this syllabus are subject to change.

Phone:13 12 01 / 08 8236 8200

School Address:

Level 7
553 Hay St
Perth WA 6000

Level 4, PKF House
139 Frome St
Adelaide 5000

Level 10, Thakral House
301 George St
Sydney 2000

Level 3, Dimension Data Building
11-17 Dorcas St
South Melbourne 3205

Level 12
307 Queen St
Brisbane 4000

Jobs & Resumes: Adelaide, Brisbane, Canberra, Melbourne, Perth, Syndey
Houses & Roommates: Adelaide, Brisbane, Canberra, Melbourne, Perth, Syndey
Travel Agencies: Brisbane, Melbourne, Perth,

Search other schools for EnCase v6 FIM/Mobile Use of EE Live Forensics training resources.

CompTIA A+ Certification Essentials Support Skills
CompTIA A+ Certification Electives
Practical Digital Evidence Gathering
EnCase v6 NTFS
EnCase v6 Network Intrusion Investigations
EnCase v6 Advanced Internet Examinations
EnCase v6 Advanced Computer Forensics
EnCase v6 Computer Forensics II
EnCase v6 Computer Forensics I
D8750/760/770 IBM Lotus Domino R8 - System Administrator
D8720 Exploring New Features in IBM Lotus Domino 8 Administration
Exploring New Features in IBM Lotus Domino Designer 8
Fundamentals of IBM Lotus Domino 8 Application Development
Building Web Applications with IBM Lotus Domino Designer 8
Using LotusScript in IBM Lotus Domino 7 Applications
ITIL v2-v3 Bridging
ITIL V3 Service Capability �Operational Support & Analysis
ITIL V3 Service Capability �Release, Control & Validation

Notice: The course description on this page was captured from the Internet as historical reference or submitted by visitors. It was archived statically and not updated from day to day.
 

Tips: Our combined search function does not only provide you with the training courses and students, but also talent resumes and jobs, or shared apartments nearby for rent.