EnCase v6 Advanced Computer Forensics

Emphasis is placed on file and operating system artifacts. This course provides in-depth coverage on topics, including:

Advanced

This course is intended for law enforcement officers, computer forensic examiners, corporate and private investigators, and network security personnel. A basic understanding of the concepts of computer forensics is required. The class curriculum builds upon the foundation of the EnCase® Computer Forensics II course, continuing with a focus on file and operating system examinations.

Tuition is $2,995.00 per student. Government training rate is $2,095.00 per student.

See Class Details for Actual Tuition Costs

Analysis of NT File System (NTFS) artifacts in Windows operating systems

Advanced NTFS data recovery

Examination of the Microsoft Windows Registry

Analysis and recovery of Microsoft Windows event log files

Hardware and software RAID technology, acquisition and examination

Principles of encrypted data recovery

Understanding and examining Windows BitLocker™ volumes

Linux and UNIX operating and file system artifacts

Linux partition recovery

Data acquisition using Linux

Understanding and examination of Macintosh disk and file system structure

Forensic examination of Macintosh computers

Macintosh OS X® operating system artifacts

Reinforcement of the EnCase® computer forensic methodology

Introduction to EnScript programming

SELECT LOCATION	SELECT DATE	COURSE INFORMATION

DIRECTIONS

For more information regarding refund concerns and program cancellation policies, contact Guidance Software Training at training@guidancesoftware.com or call 626.229.9191 ext. 566.