CPE credits: 0   |  Level: Introductory   |  Prerequisites: Basic computer skills. Advance preparation for this course is not required.

This on-line course involves practical exercises and real-life simulations. The class provides participants with an understanding of the proper handling of digital evidence from the initial seizure of the computer/media to acquisition, and then progresses to the analysis of the data. It concludes with archiving and validating the data.



Students attending this course will learn the following:

• What constitutes digital evidence and how computers work
• An overview of the EnCase Computer Forensic Methodology
• Basic structures of the FAT and NTFS file systems
• How to create a case and how to preview/acquire media
• How to conduct basic keyword searches
• How to analyze file signatures and view files
• How to restore evidence
• How to archive files and data created through the analysis process
• How to prepare evidence for presentation in court
• How to verify the evidence file

WHO SHOULD ATTEND

This course is intended for IT security professionals, litigation support and forensic investigators Participants may have minimal computer skills and may be new to the field of computer forensics.

---

Tuition is $3,495.00 USD per student
Government training rate is $2,495.00 per student

The Annual Training Passport is valid for ONE EnCase® OnDemand Training