Skip to Main Content

FAA78100009:   (78100009) Guidance Software - EnCase Computer Forensics I (v7)

FAA78100009 Active
(78100009) Guidance Software - EnCase Computer Forensics I (v7)
COURSE 2012-02-29
Vendor: Guidance Software, 215 N. Marengo Avenue, 2nd Floor, Pasadena, CA 91101. Phoone # 703-657-7234. POC: courtney.vu@guidancesoftware.com The EnCase Computer Forensics 1 (v7) shows attendees how to use EnCase v7 to acquire a complete copy of the data from removable media in a forensically sound manner. The concept of digital evidence and how computers work (paying particular regard to the associted impact on forensic examination) are also included. There is a practical exercise focused on creating as case and acquiring data from a tumb drive. There is a detailed sicussion of the FAT file sstems as well as an overview of the NT file system. The students will learn how to properly preview a computer system prior to acquisition. Hard disk acquisition is covered, using both a forensically sound Linux CD, LinEn, and drive-to-drive connection methods. Attendees will learn how to properly process evidence files and will be introduced to basic methods of search techniques.
NA NA
OAT 32.0
Prerequisites

 

D O T Triskelion

U.S. Department of Transportation

Federal Aviation Administration

800 Independence Avenue, SW

Washington, DC 20591

(866) TELL-FAA | (866) 835-5322