Windows Forensics
Requirements: This course provides students with the
knowledge and skills necessary to conduct an effective Windows based
investigation. Attendees should already be conducting computer based
investigations and be familiar with the AccessData suite of tools.
Sign up on-line
Investigate the Difference
Receive hands on training to locate and examine Recycle Bin information, Metadata and OLE items, Link files, Thumbnail files and other Windows artifacts.
Learn the forensic value of the NTUSER>DAT, SAM, SYSTEM, SECURITY and SOFTWARE files.
Gain access to protected operating system files and open files that have been encrypted with the Microsoft Encrypting File System (EFS)
3-Day Instructor-Led Training
Practical Skills Assessment (PSA) offered during class
AccessData tools used in class include:
Each student receives:
- USB 2.0 Thumb Drive
- Student CD with Evidence and Lab files, and current AccessData Software
- Prerequisite course for ACE program
Get the Forensic Tools and Training You Need
Attending this training will enable you to:
- View, search and analyze Windows artifact information from unallocated space, file structure and registry information.
- Decrypt industry standard file encryption as well as Microsoft's Encrypted File System (EFS)
- Recover Windows logon passwords, email and internet account passwords and internet search terms from the registry
- Use FTK Imager to seize live, protected operating system files in the field.
|
|
Acquisition Data, based in Houston, Texas, is a leading provider of computer forensic services and training. Acquisition Data provides both national and international clients with assistance on the preservation, recovery, analysis, and reporting of electronic data for corporate use as well as use in a court of law. Clients may also engage in computer forensic training provided by Acquisition Data through partnerships with leading companies such as AccessData and Wetstone Technologies. Clients can learn advanced techniques to adequately conduct their own computer forensic investigations. Expert testimony is also available for depositions, litigation or prosecution. Call today to discuss how Acquisition Data can help your business with computer forensic or computer forensic training needs.
|
|