Prerequisites
This hands-on class is intended for experienced users, particularly forensic professionals and law enforcement
personnel, who use AccessData forensic software to examine, analyze, and classify digital evidence.
To obtain the maximum benefit from this class, you should meet the following requirements:
-
Able to understand course curriculum presented in English
-
Perform most operations on a personal computer
-
Have a intermediate to advanced knowledge of computer forensic investigations and acquisition procedures
-
Be very familiar with the Microsoft Windows environment
-
Have moderate to advanced experience with FTK and its component software
Class Materials and Software
You will receive the associated materials prior to the course.
During this three-day, hands-on course, participants will perform the following tasks:
-
Conduct Intermediate level concepts with PRTK and be introduced to DNA
-
Use specialized features of FTK, such as: Timeline Reporting, Find Similar Files and Restore Image to Disk
-
Use the malware add-on Cerberus
-
Understand the concept of Distributed Processing
-
Be introduced to the concept of the Adding Remote Data
-
Use the memory analysis functionality of FTK.
-
Conduct an extensive student exercise
-
Discuss concepts of workflow and forensic analysis theory
The course includes multiple hands-on labs that allow students to apply what they have learned in the workshop.
