ENCASE ADVANCED

NEW CLASS SPECIAL - $100 off the list price.

Attend both CFFEN and EnCase Advanced consecutively and receive an additional $500 tuition discount.

Next Class | TBA

This four day course is intended for law enforcement officers, computer forensic examiners, corporate and private investigators, and network security personnel. A basic understanding of the concepts of computer forensics is required. The class curriculum builds upon the foundation of the EnCase® Computer Forensics II course, continuing with a focus on file and operating system examinations.

• Analysis of NT File System (NTFS) artifacts in Windows operating systems.
• Advanced NTFS data recovery.
• Examination of the Microsoft Windows Registry.
• Analysis and recovery of Microsoft Windows event log files.
• Hardware and software RAID technology, acquisition and examination.
• Principles of encrypted data recovery.
• Understanding and examining Windows BitLocker™ volumes.
• Linux and UNIX operating and file system artifacts.
• Linux partition recovery.
• Data acquisition using Linux.
• Understanding and examination of Macintosh disk and file system structure.
• Forensic examination of Macintosh computers.
• Macintosh OS X® operating system artifacts.
• Reinforcement of the EnCase® computer forensic methodology.
• Introduction to EnScript programming.

Prerequisites: EnCase Intermediate or Digital Intelligence CFFEN, or experience using EnCase Forensic Edition and prior coursework in computer forensics.

Custom training programs can be developed to meet specific customer requirements. For additional information on our training programs, as well as scheduling information, please contact Digital Intelligence at (262) 782-3332.

FREE TRAINING WITH FRED SYSTEM PURCHASE

Digital Intelligence offers free training. This limited time offer will provide a single seat in our Computer Forensics with FRED class for each FRED system purchased. This program offers a great opportunity to obtain detailed training in the operation and configuration of your new FRED system! Limited seating is available in each class under this offer so make your arrangements early. Although tuition will be covered under this program, travel, meals, and lodging will be the responsibility of the student. A credit card commitment will be required to reserve seating under this program as last minute cancellations and no-shows will be charged a $150.00 cancellation fee (otherwise no charges will be applied).