1 (888) 999-9712 |
Customer Service
|
Customer Portal
Products
EnCase® Enterprise Platform
EnCase® eDiscovery
EnCase® Cybersecurity
EnCase® Forensic
EnCase® Portable
Tableau Forensic
Services
Professional Services
Advisory Program
Implementation
Casework
Security Assessment
Data Mapping
Integration
Staff Augmentation
Training
Training Overview
Course Offerings
Course Schedule
Training Programs
Certification Programs
Certifying Organizations
Training Partners
Resources
Webinars & Demos
Whitepapers & Briefs
eDiscovery Legal Team
Real eDiscovery Magazine
EnCase® Legal Journal
Customer Center
Customer Service
Technical Support
CEIC Conference
Training
Professional Services
Product Registration
Partners
Channel Partner Program
Channel Partners
Channel Partner Portal
Service Providers
Law Firms
About Us
Blogs
Company Overview
Management
eDiscovery Legal Team
Newsroom
Events Calendar
Careers
Investors
Contact Us
Home
/
This hands-on course is designed for investigators with significant computer skills who want to expand their knowledge of examining live computers, networks, and servers. The class combines forensic examinations with live response in a network environment. Students learn to use the EnCase® Field Intelligence Model (FIM) software to examine a variety of live machines and obtain evidence that may exist or be interpreted only while the target computer is running. Students will also learn how to deploy the FIM and conduct a forensic examination of a remote computer on the Internet. Delivery method: Group-Live. NASBA defined level: basic to intermediate.
Emphasis is placed on the access and acquisition of data from live machines running a variety of operating systems and file systems and on overcoming myriad obstacles to obtain investigative information. The course provides in-depth coverage on topics including:
32
Introductory to Intermediate
EnCase Computer Forensics II or EnCE Certification. Advance preparation for this course is not required.
This course is intended for law enforcement officers, computer forensic examiners, corporate and private investigators, network security personnel, and Probation/Parole Officers authorized for home monitoring of Probationers and Parolees. A basic understanding of the concepts of computer forensics, networking fundamentals and the Internet is helpful. The class curriculum builds upon the foundation of the EnCase Computer Forensics I and II courses, with a focus on live network communication examinations.
Tuition is $2,995.00 per student. Government training rate is $2,095.00 per student.
See Class Details for Actual Tuition Costs
Understanding the fundamental operations of the FIM
Introduction to cryptology
Installing FIM and the Secure Authentication for EnCase®
Understanding TCP/IP protocols
FIM real-world scenarios
Configuring networks
Administering the SAFE
Installation and advanced servlet pushing technologies: how to deploy the FIM on servers and networks
Troubleshooting a FIM deployment
FIM previews and acquisitions
Software and hardware RAIDs
Using the FIM Snapshot—identifying open ports, open files, processes and device logons on a live machine
Understanding port numbers and open ports
SELECT LOCATION 
SELECT DATE
COURSE INFORMATION
DIRECTIONS
For more information regarding refund concerns and program cancellation policies, contact Guidance Software Training at
training@guidancesoftware.com
or call 626.229.9191 ext. 566.