Computer Forensic Investigation Training (C.F.I.T.)
Examiners learn the concepts and techniques to perform digital evidence examinations manually they employ those concepts and techniques in practical exercises that guide them step by step. This 2 day hands on training course teaches digital evidence examiners to locate information within data sets and analyze that information, processes that are automated by many computer forensic software tools and performed invisibly. Understanding these data storage and recovery fundamentals and the ability to perform these processes manually are the skills that distinguish the expert digital evidence forensic examiner from the computer forensic software operator. Upon successful completion of CFIT training, the investigator will:
Understand the fundamentals of digital evidence forensic examination
Perform digital evidence forensic examinations manually
Independently verify the results generated by automated digital evidence examination tools and software suites
CFIT digital evidence forensic examination training offers practical experience in a wide array of digital evidence forensic examination situations with real world applicability. Computer Forensic Investigation Training provides investigators with the skills and confidence to know their digital evidence forensic examinations are performed with the highest degree of expertise.
Read on to see what we will be covering:
Day 1
* Decoding Link files * Decoding both 280 byte and 800 byte INFO2 files * Recovering Link files and INFO2 records from unallocated space with DataLifter * Decoding MSIE History data * Decoding MSIE Cache data * Decoding MSIE Date-Ranged History data * Basic anatomy of a DBX file * Recover email from unallocated space with DataLifter * Theory for manual base64 recovery * Extract MIME data from unallocated space with DataLifter * Anatomy of Norton Protected Recycle Bin
Day 2
* Understanding the user interface of File Extractor Pro * Using File Signature Editor * Creating new signatures with the new File Signature Builder * Creating Advanced files signatures * Theory of Artifact Finder * Using Artifact Finder * Web based email recovery * Exif Tags and advanced recovery
*Cost
CFIT 2 day training course
Non Law Enforcement $1,595.00
Law Enforcement FREE
Examiners receive:
Data Lifter
File Extraction Pro
Digital Companion
.Net Bonus Tools
Questions, inquiries, or to schedule a class Click Here