Data Forensics II - Advanced

Catalog description

This course provides information on advanced computer forensics and how to prepare for and conduct a computer investigation, use of computer forensics software including Access data's Forensic Toolkit FTK and Guidance Software's Encase, use of computer forensics acquisition hardware including Forensic Recovery Evidence Device, FRED DX (Dual Xeon), Ultimate Tool Kit Write Blocker suite, Voom Hardcopy III, advanced techniques in Windows Registry analysis utilizing FTK's Registry Analyzer, recover forensic data from handheld Accessdata Mobile Phone Plus, password recovery tools including Access data's PRTK, analysis of Windows and Linux operating systems. Hands-on exercises are an integral part of the course.