FAA78100010: (78100010) EnCase v6 Computer Forensics II
| FAA78100010 | Cancelled | ||
| (78100010) EnCase v6 Computer Forensics II | |||
| COURSE | 2008-11-05 | ||
| This hands-on course is designed for investigators with strong computer skills, prior computer forensic training, and experience using the EnCase forensic software. This course builds upon the skills covered in the EnCase Computer Forensics I course and enhances the examiner's ability to work efficiently through the use of the unique features of EnCase. Students must understand evidence handling; the structure of the evidence file; creating and using case files; data acquisition methods including DOS based, hardware write protected, crossover cable and disk to disk; recovering deleted files and folders in a FAT environment.\; keyword searches across logical and physical media; creating and using EnCase bookmarks; file signatures and signature analysis; and locating and understanding Windows artifacts. Delivery method: Group-Live. NASBA defined level: intermediate. | |||
| NA | NA | ||
| OAT | 32.0 | ||
| Prerequisites | |||
