FAA78100009: (78100009) Guidance Software - EnCase Computer Forensics I (v7)
FAA78100009 | Active | ||
(78100009) Guidance Software - EnCase Computer Forensics I (v7) | |||
COURSE | 2012-02-29 | ||
Vendor: Guidance Software, 215 N. Marengo Avenue, 2nd Floor, Pasadena, CA 91101. Phoone # 703-657-7234. POC: courtney.vu@guidancesoftware.com The EnCase Computer Forensics 1 (v7) shows attendees how to use EnCase v7 to acquire a complete copy of the data from removable media in a forensically sound manner. The concept of digital evidence and how computers work (paying particular regard to the associted impact on forensic examination) are also included. There is a practical exercise focused on creating as case and acquiring data from a tumb drive. There is a detailed sicussion of the FAT file sstems as well as an overview of the NT file system. The students will learn how to properly preview a computer system prior to acquisition. Hard disk acquisition is covered, using both a forensically sound Linux CD, LinEn, and drive-to-drive connection methods. Attendees will learn how to properly process evidence files and will be introduced to basic methods of search techniques. | |||
NA | NA | ||
OAT | 32.0 | ||
Prerequisites |