DF120 - Foundations in Digital Forensics with EnCase
Duration: 32 Hours
Formerly EnCase v7 Computer Forensics I.
This OnDemand course involves practical exercises and real-life simulations in the use of OpenText EnCase software (EnCase). The class provides participants with an understanding of how EnCase may be used to examine data related to an incident response, an employee misconduct investigation, and/or a law enforcement criminal and/or civil investigation. Participants create cases using EnCase, configure the application to maximize its utilization, and learn evidence acquisition concepts and how to validate the data collected. Instruction progresses to the analysis of the data whether related to criminal investigations, cybersecurity incidents, or other matters. The course will cover techniques, such as keyword or indexed searching along with hash analysis. Participants will learn how to bookmark, export, and create reports relating to examination findings. The course concludes with instruction on archiving, validating the data, and restoring the case.
CPE Credits - 0
Audience
This course is intended for digital forensic investigators, including law enforcement, government, military, corporate, ITsecurity, and litigation support professionals. Participants may have minimal computer skills and may be new to the field of computer forensics.
Prerequisites
Basic computer skills. Advance preparation for this course is not required.
Summary
Students attending this course will learn the following:
The EnCase digital forensic methodology
How to navigate the EnCase interface
How to extract data and files from your evidence
How to bookmark evidence files, file sets, and data structures
How to conduct raw and index searches
How to analyze file signatures and view files
How to conduct hash and entropy analyses and import hash sets
How to import and export data to and from Project VIC
How to install external file viewers to EnCase
How to prepare reports, using templates provided with EnCase
How to create a report template
How to restore evidence
How to archive files and data created through the analysis process
The proper techniques for handling and preserving evidence
System Requirements
1. A desktop/laptop computer.
Microsoft® Windows operating system is recommended.
2. Internet access
3. Latest Adobe® Flash Player software http://www.adobe.com
4. Latest Adobe Reader software http://www.adobe.com
5. Some courses offer the ability to conduct optional practical exercises on a remote workstation. Internet Explorer and Firefox are recommended.
***Passport students may only be registered in two (2) OnDemand courses concurrently
You are registering for an online class. EnCase OnDemand Courses can be accessed online 24/7.
The course content is available for 60 days once registered.
Terms & Conditions
Training materials for this course, including the DF120 - Foundations in Digital Forensics with EnCase OnDemand student manual, will be sent electronically. MANUALS ARE AVAILABLE ONLY IN NON-PRINTABLE EBOOK FORMAT. PHYSICAL COPIES OF MANUALS ARE NOT AVAILABLE WITH TRAINING OnDEMAND COURSES.