Course Overview
    This hands-on course involves practical exercises and real-life simulations in the use of EnCase® Forensic
    version 7 (EnCase v7). The class provides participants with an understanding of the proper handling of digital evidence from the initial seizure of the computer/media to acquisition, including the use of FastBloc® SE and LinEn. Instruction then progresses to the analysis of the data. It concludes with archiving and validating the data. Delivery method: Group-Live. NASBA defined level: basic.
    Students attending this course will learn the following:
CPE Credits
    32
Training Level
    Introductory
Prerequisite
    Basic computer skills. Advance preparation for this course is not required.
Who Should Attend
  • This course is intended for IT security professionals, litigation support and forensic investigators Participants may have minimal computer skills and may be new to the field of computer forensics.
Tuition
  • Tuition is $2,495.00 USD per student.
  • See Class Details for Actual Tuition Costs
    The EnCase v7 computer forensic methodology
    What constitutes digital evidence and how computers work
    Basic structures of the FAT and NT file systems
    How to create a case and how to preview and acquire media
    How to conduct raw and index searches
    How to analyze file signatures and view files
    How to conduct hash analysis and import hash sets
    Techniques using templates provided with EnCase v7 to create basic reports
    How to restore evidence
    How to archive files and data created through the analysis process
    The proper techniques for handling and preserving evidence
Syllabus


SELECT LOCATION  SELECT DATE COURSE INFORMATION

DIRECTIONS
For more information regarding refund concerns and program cancellation policies, contact Guidance Software Training at training@guidancesoftware.com or call 626.229.9191 ext. 566.