Students attending this course will learn the following: 

•    The EnCase digital forensic methodology 
•    How to navigate the EnCase interface
•    How to create a case and how to preview and acquire media 
•    How to extract data and files from your evidence
•    How to bookmark evidence files, file sets, and data structures
•    How to conduct raw and index searches 
•    How to analyze file signatures and view files 
•    How to conduct hash and entropy analyses and import hash sets
•    How to import and export data to and from Project Vic
•    How to install external file viewers to EnCase
•    How to locate data in unallocated space
•    How to prepare reports, using templates provided with EnCase 
•    How to create a report template
•    How to restore evidence 
•    How to archive files and data created through the analysis process  
•    The proper techniques for handling and preserving evidence