Dates: August 16-19, 2010
Time: 8:00AM until 5:00PM
Location: Maine Criminal Justice Academy 15 Oak Grove Road Vassalboro, Maine 04989
Tuition is $2,995.00 USD per student. Government training rate is $2,095.00 USD per student.
Register

****Note: EnCase V6 Computer Forensic I is being held the proceeding week at this location.

CPE credits: 32 | Level: Intermediate | Prerequisites: EnCase® Computer Forensics I. Advance preparation for this course is not required.

This hands-on course is designed for investigators with strong computer skills, prior computer forensics training, and experience using the EnCase forensic software. This course builds upon the skills covered in the EnCase Computer Forensics I course and enhances the examiner’s ability to work efficiently through the use of the unique features of EnCase.

*Students must understand evidence handling; the structure of the evidence file; creating and using case files; data acquisition methods including DOS based, hardware write protected, crossover cable and disk to disk; recovering deleted files and folders in a FAT environment; keyword searches across logical and physical media; creating and using EnCase bookmarks; file signatures and signature analysis; and locating and understanding Windows® artifacts.

Focusing on investigations common to the private sector, students will learn about the following:

How to create and use of logical evidence files
How to locate and recover deleted partitions and folders
How to conduct keyword searches and advanced searches using GREP
Students will gain an understanding of the EnCase Virtual File System (VFS) and Physical Disk Emulator (PDE)
Students will learn about the Windows® Registry
Students will learn how to deal with compound file types
How to export files, directories and entire volumes
How to identify files using hash values and building hash libraries
How to identify Windows XP operating system artifacts such as link files, recycle bin, and user folders
How to prepare reports and evidence for presentation in court
How to recover artifacts such as swap files, file slack, and spooler files
How to recover printed and faxed pages

This course is intended for IT security professionals, litigation support and forensic investigators. Participants should have attended the EnCase Computer Forensics I.

BitSec is a Guidance Software licensed training partner and one of only a few training partners in the world that can offer all of their forensic courses. Mike Fowler, Senior Director at Guidance Software, Inc. said: “BitSec Forensics was a natural selection as a Guidance Software training partner. Their years of experience in the forensic training and digital investigations arenas offer students a training experience built upon practical application.”

We accept purchase orders, credit cards, checks and money orders and electronic payments. Please contact us for wiring instruction. International duties, tax, customs and other fees are to be paid by the customer. Every student has a PC workstation.

For more information, contact a BitSec training professional toll free at (877) 272-1417 or by email at training(at)bitsecforensics(dot)com.