DV200 Digital Video investigations with Magnet Witness
DV200 Digital Video Investigations with DVR Examiner
Digital Video Investigations with DVR Examiner is a beginner-level course, designed for participants who are not yet familiar with the concepts of the recovery and analysis of digital video files from commercially available digital video recorders. This course is offered as an in-person course.
Description
After completing the three-day course, participants will have the knowledge and skills to acquire data from digital video recorders (DVRs) in a safe and forensic manner. Students will learn how to identify and extract hard drives from these devices and acquire forensic images of the data using write-blocking protection. Participants will also learn how to extract the data from these images using DVR Examiner and present it to others for case work.
What to Expect
Hear directly from Justin Almanza, Forensic Trainer at Magnet Forensics, about why you should take our Digital Video Investigation with DVR Examiner (DV200) course, what you can expect when you take it, and what type of real-life experience he brings to the classroom.
Course Prerequisites
None
Course Objectives
MODULE 1: INTRODUCTION AND PRINCIPLES OF DIGITAL EVIDENCE
Learning objectives will be presented along with expected outcomes over the course’s four days.
The basic concepts of dealing with digital evidence such as hashing, timestamps, and the setting up of scene collection devices will be explored.
MODULE 2: UNDERSTANDING DIGITAL VIDEOS
Students will learn about the history of digital video formats, including how these files are formatted and structured.
File formats, metadata of files, and codecs that comprise digital video files will be explored.
At the conclusion of this module, students will be able to successfully identify information about video files and their formats.
MODULE 3: DIGITAL VIDEO STORAGE (DVR SYSTEMS)
This module will focus on how digital videos are stored on modern digital video storage or digital video recorder systems.
The differences between local storage, cloud storage, and network storage DVR systems will be explained.
Students will learn how to export files natively using DVR systems as well as how to safely remove and image the internal storage media to capture information.
Safely disassembling and removing digital storage hardware from within DVR systems will be learned through hands-on exercises.
Hardware write-blockers will be demonstrated with student’s use to understand how to safely protect drives during the imaging process.
MODULE 4: CREATING CASES IN DVR EXAMINER
The DVR Examiner software will be used to create new cases and explore collected forensic images.
The difference between different scan types within DVR Examiner along with available features will be explored.
Students will understand the scan job types within DVR Examiner and how to successfully filter and explore videos.
MODULE 5: EXPLORING RECOVERED MEDIA
Incident and location detail s with DVR Examiner will be set up as well as reviewing the software’s Audit Log.
Students will learn about clip lists and how to tag and export clips.
Hands-on labs will explore the functionality of DVR Examiner, including how to split frames, export videos, play proprietary formats within the software, and more.
MODULE 6: WORKING WITH EXTRACTED VIDEOS
Students will learn how to augment digital video files, as well as the pros and cons of the process.
How to augment, apply filters, blurring, stabilization, and other techniques to enhance digital videos will be explored.
Hands-on labs will utilize open-source software to properly modify and enhance digital video files for use in presentations and court cases including proper documentation.
Additional Information
Who Should Attend: Participants who are unfamiliar with the principles of digital forensics
Advanced Preparation: None
Program Level: Beginner-level
Field of Study: Computer Software & Applications
Delivery Method: Group Internet Based & Group Live Refunds and Cancellations: Training Course(s) can be rescheduled to a later date or cancelled by either Magnet Forensics or you without charge or penalty if written notice is received twenty-one (21) days or more prior to the date of the Training Course. No rescheduling shall be permitted on less than twenty-one (21) days written notice, which shall constitute a cancellation without a refund. Your written rescheduling or cancellation notice must be emailed to [email protected] or contact 226-499-8962. If Magnet Forensics cancels a Training Course due to insufficient attendance, you will have the option to register in a different scheduled Training Course or receive a full refund. Please do not book travel until you have confirmed that the Training Course will be running.Magnet Forensics is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website:www.nasbaregistry.org.