The ability to identify, preserve and analysis data from computer systems in a
court admissible and forensically sound manner is becoming increasingly
important. Once solely the realm of law enforcement and government personnel,
recent legal changes are forcing a wide range of corporations and organizations
to acquire these highly technical skills.
Introduction to Digital Forensic Investigations
This is an introductory course on the collection, preservation and processing of digital evidence as it relates to computer related crimes. It is designed for the entry-level digital forensic investigator who is new to the field of digital forensics. The investigator will learn the principles and techniques that are utilized in the collection and processing of various types of magnetic and optical media. The focus of the course is on developing the basic required knowledge and skills for conducting investigations of computer crimes for governmental and commercial organizations that can subsequently be used in legal proceedings. The investigator will also participate in practical exercises that simulate common computer crimes and the subsequent acquisition and examination of digital evidence.
Specifically you will learn to:
- Identify and Respond to Computer Crime Incidents
- Understand the Legal aspects of Digital Forensic Acquisition, Processing and Analysis
- Identify the Concepts and Processes Required for Conducting Digital Forensic Investigations
- Acquire and Examine Windows Operating Systems
- Understand Floppy, CD and Hard Drive Structures and the Processes for Acquiring and Restoring Digital Evidence from them
- Identify and Analyze Critical File Formats and Systems
- Use Helix and Windows Based Forensics Tools for Conducting Investigations
- Apply your acquired knowledge and skills to Practical Real World Exercises
This five-day seminar provides the introductory knowledge and skills that an investigator will need to conduct basic digital media analysis of a computer. Upon the conclusion of the seminar, the investigator will be able to identify, prepare and complete a basic examination of digital evidence.
back to top
