FAA78100009: (78100009) Guidance Software - EnCase Computer Forensics I (v7)
| FAA78100009 | Active | ||
| (78100009) Guidance Software - EnCase Computer Forensics I (v7) | |||
| COURSE | 2012-02-29 | ||
| Vendor: Guidance Software, 215 N. Marengo Avenue, 2nd Floor, Pasadena, CA 91101. Phoone # 703-657-7234. POC: courtney.vu@guidancesoftware.com The EnCase Computer Forensics 1 (v7) shows attendees how to use EnCase v7 to acquire a complete copy of the data from removable media in a forensically sound manner. The concept of digital evidence and how computers work (paying particular regard to the associted impact on forensic examination) are also included. There is a practical exercise focused on creating as case and acquiring data from a tumb drive. There is a detailed sicussion of the FAT file sstems as well as an overview of the NT file system. The students will learn how to properly preview a computer system prior to acquisition. Hard disk acquisition is covered, using both a forensically sound Linux CD, LinEn, and drive-to-drive connection methods. Attendees will learn how to properly process evidence files and will be introduced to basic methods of search techniques. | |||
| NA | NA | ||
| OAT | 32.0 | ||
| Prerequisites | |||
