CPE credits: 32   |  Level: Expert   |  Prerequisites: EnCase® Computer Forensics II or EnCE Certification. Advance preparation for this course is not required.

Note: The content of this course is significantly different and we recommend that anyone who took the EnCase Internet & E-mail course prior to February 2004 now take EnCase Advanced Internet Examinations.

This hands-on course involves practical exercises and real-life simulations. The class focuses on the forensic evidence located on the computer belonging to the suspect and /or victim-- not online or cyber investigations. E-mails and the Internet are cornerstones of consumer and business computer use. Virtually all computer forensic examinations will involve analysis of e-mail and Internet artifacts, underscoring the need to understand the relevance of Internet and e-mail-based evidence recovered during examinations. Delivery method: Group-Live. NASBA defined level: advanced.

The course provides in-depth coverage on artifacts involving:

• Peer-to-peer clients
• Instant Messaging Clients
• Trojan viruses
• System Monitors/keyloggers
• JavaScript exploits
• Popular web browsers, such as Internet Explorer, Netscape, and Mozilla

Students will learn how to interpret Internet browser history, search engines, logs, and correctly rebuild web pages.

The course will enable students to recover and examine e-mail messages, headers, and attachments from widely used e-mail applications (Outlook®, America Online®, and Netscape®) and web-based e-mail providers. Students will also locate and examine artifacts from search engines, instant messaging clients, and newsgroups.

Course Syllabus

---

Tuition is $2,995.00 per student
Government training rate is $1,995.00 per student