ONLINE TRAININGS
Online: Opentext Building an Investigation with EnCase
WHY COME?
This course builds upon the skills covered in the DF120 – Foundations of Digital Forensics course and enhances the examiner‘s ability to work efficiently through the use of the unique features of EnCase®.
COURSE COMPONENTS
Focusing on commonly conducted investigations, students will learn, amongst other things, about the following:
- Recovering encrypted information using Windows BitLocker™
- Locating and recovering deleted partitions
- Dealing with compound file types
- Windows® Registry
- Determining time zone offsets and properly adjust case settings
- Creating and using conditions for effective searching
- Using the EnCase® Evidence Processor
- Overview of the FAT, ExFAT, and NT file system
- Keyword searches and advanced searches
- Single and logical evidence files
- How to identify Windows operating system artifacts
- Examining e-mail and internet artifacts
QUALIFICATIONS ATTAINED
- Understanding forensic concepts in EnCase®, the structure of evidence files, creating and using of the case files
- Knowledge about data acquisition, analysing and data recovery methods
- Understanding the different searching possibilities
- Signature analysis and exporting evidence
DATE AND TIME
The online classes take place regularly.
Also available: on-demand classes with flexible time management.
For dates and times please contact us!
Registration Form
Here you have the opportunity to register for the current training. Or contact us for more information.
