Essential Forensic Techniques I


Datum: 20.02. - 21.02.2018
Ort:    DE, 76870 Kandel, Barthelsmühlring 24
Veranstalter:  mh SERVICE GmbH
Organisator:    mh SERVICE GmbH
Unterrichtssprache: Englisch




Over a period of two days, the BlackLight Tool Training course offers a hands-on investigative approach addressing best practice techniques for authenticating, analyzing and reporting digital evidence found on Microsoft Windows and Mac OS X computers, Android devices, and iOS (iPhone, iPad, and iPod touch) devices. Coursework covers the use of BlackLight, a comprehensive triage and analysis tool designed to help investigators conduct digital forensic examinations. After a brief introduction to MacQuisition, BlackBag’s imaging tool, students triage a full case and learn the advanced functions of BlackLight though instructor-led exercises and hands-on practical case studies.



At the conclusion of this course, students will have a comprehensive understanding of BlackBag’s BlackLight forensic examination tool. Students will possess the knowledge and skills necessary to correctly and confidently use BlackLight while conducting cross-platform digital forensic examinations. Coursework will culminate with the creation of a customized, standard format forensic examiner case report using the built-in software reporting capabilities.



While there are no prerequisites for this course, students should bring a laptop for use during the hands-on exercises, meeting the following specifications:

  • PC (Win 7+) OR Mac (10.9+)
  • Intel-based system
  • 2.8GHz Intel Core 2 Duo or better
  • 4GB RAM or more
  • USB port (3.0 recommended)



The curriculum is frequently updated to cover the most current and relevant topics. Therefore, the following outline is subject to change without prior notice.

  • Acquiring Evidence using
  • MacQuisition
  • Analyzing Evidence
  • Features and Functionality - Windows
  • Shellbags
  • Jump Lists
  • LNK Files
  • User Assist
  • Prefetch and Superfetch
  • Last Executed
  • Specialized Registry View
  • Recent Items
  • Features and Functionality - All Platforms
  • Summary Details of All Devices
  • Powerful File Filter and Browser View
  • Pictures, Videos, and Audio Files
  • Chat Logs and Email
  • Internet Artifacts
  • Android and iOS Features and Functionality
  • Logical iOS Device Acquisitions
  • iOS Backup Folder Acquisitions
  • Third Party Application Parsing
  • Call History, Voicemail, and Voice Memos
  • SMS and Notes
  • Calendar and Contacts
  • Location Data, Wi-Fi, and Maps
  • Media
  • Reporting
  • Tagging, Metadata, and File Export
  • Organizing and Generating a Report
  • Hands-on Practical and Q & A




Weitere Informationen und Anmeldung:

Diese E-Mail-Adresse ist vor Spambots geschützt! Zur Anzeige muss JavaScript eingeschaltet sein!

+49 (0) 7275 40444-0