FAA78100010: (78100010) EnCase Computer Forensics II (v7)
| FAA78100010 | Active | ||
| (78100010) EnCase Computer Forensics II (v7) | |||
| COURSE | 2012-02-29 | ||
| Vendor: Guidance Software, 215 N. Marengo Ave., 2nd Floor, Pasadena, CA 91101. Phone # 703-657-7234. POC: courtney.yu@guidancesoftware.com Students while attending EnCase Computer Forensics II (v7) will learn how to view the results of various search techn iques. The students will learn how to bookmark data and use the new tagging feature included in EnCase v7. Instruction is given on the use of file signatures to properly identify file types. The principal and practical usge of digital fingerprints (has value) to identify files of interest and exclude known files is also covered. Attendees will install external viewers within EnCase v7 and learn how to copy data from within an evidence file. The students will participate in practical exercises to include an exercise in signature and hash analysis. The students will learn how to use the new EnCase v7 report templates. Attendees are given advice and guidance for archiving as well as instruction on how to restore and open an archived case. The students will explore how to reacquire evidence in order to modify evidence-file parameters but still maintain data integrit. Attendees will observe first hand how EnCase v7 can detect and idetif any changes to the content of an evidenc file The mportance of proper evidence hndling will be discussed and the attendees will be given examples of good practice i this area. The course concludes with final practical exercise on the week's instruction. | |||
| NA | NA | ||
| OAT | 32.0 | ||
| Prerequisites | |||
