Computer Forensic Investigation Training (C.F.I.T.)

Examiners learn the concepts and techniques to perform digital evidence examinations
manually they employ those concepts and techniques in practical exercises that guide
them step by step.  This 2 day hands on training course teaches digital evidence
examiners to locate information within data sets and analyze that information,
processes that are automated by many computer forensic software tools and performed
invisibly. Understanding these data storage and recovery fundamentals and the ability
to perform these processes manually are the skills that distinguish the expert digital
evidence forensic examiner from the computer forensic software operator. Upon
successful completion of CFIT training, the investigator will:
  • Understand the fundamentals of digital evidence forensic
    examination

  • Perform digital evidence forensic examinations manually

  • Independently verify the results generated by automated
    digital evidence examination tools and software suites
CFIT digital evidence forensic examination training offers practical experience
in a wide array of digital evidence forensic examination situations with real
world applicability.
Computer Forensic Investigation Training provides investigators with the skills
and confidence to know their digital evidence forensic examinations are
performed with the highest degree of expertise.
Read on to see what we will be covering:

Day 1

* Decoding Link files
* Decoding both 280 byte and 800 byte INFO2 files
* Recovering Link files and INFO2 records from unallocated space with DataLifter
* Decoding MSIE History data
* Decoding MSIE Cache data
* Decoding MSIE Date-Ranged History data
* Basic anatomy of a DBX file
* Recover email from unallocated space with DataLifter
* Theory for manual base64 recovery
* Extract MIME data from unallocated space with DataLifter
* Anatomy of Norton Protected Recycle Bin

Day 2

* Understanding the user interface of File Extractor Pro
* Using File Signature Editor
* Creating new signatures with the new File Signature Builder
* Creating Advanced files signatures
* Theory of Artifact Finder
* Using Artifact Finder
* Web based email recovery
* Exif Tags and advanced recovery


*Cost

CFIT 2 day training course

Non Law Enforcement $1,595.00

Law Enforcement     FREE

Examiners receive:
  • Data Lifter
  • File Extraction Pro
  • Digital Companion
  • .Net Bonus Tools











Questions, inquiries, or to schedule a class  Click Here
INTERNATIONAL DATA FORENSIC SOLUTIONS CENTER