Course Title: PRACTICAL COMPUTER FORENSICS FOR INVESTIGATORS
Length of Course: 12 HOURS
Price: $350.00 per student
Max Class Size: 50 students
Equipment Requirements: Each student will be need to have a laptop computer available to be utilized during practical exercises. Students will not need internet access. All software will be provided.
History and Purpose:
At the highest organizational level, this course offers an understanding of available options and related effort for data acquisition and analysis related to both internal and external investigations. For those supporting data-centric efforts, we provide additional background centered around generating chain of evidence, audit trails and case management. For those exposed to investigations and data acquisition this course provides practical implementations and instruction based upon solid forensics techniques and procedure.
This course will provide a departmental investigator, supervisor or IT support with the tools necessary to conduct a data acquisition investigation utilizing practical forensics applications. This course is intended to provide a solid technical investigative foundation in areas such as operating systems, file storage and hardware acquisition.
This course is not intended to replace valued investigative techniques and experience. It is also not intended to detract from the ability of an investigator to develop and follow leads related to an internal investigation or a criminal offense. Our purpose is to develop information that will aid an investigator in developing evidence that will assist in case construction. The instructor will introduce a set of tools which will provide the investigator with consistent and reliable research techniques which are driven by mostly free and readily available software applications. This course approach is to minimize expenses incurred by agencies in these most often sensitive investigations. We recognize that the costs associated with the tools and training for most packaged software may quickly exhaust police budgets and IT resources available for even simple technical tasks.
This course provides an objective approach to the field of computer forensics with a top-down implementation allowing for creative solutions. With these solutions, the investigator is allowed the freedom to accomplish investigative objectives simply and efficiently.
Participants: Practical Forensics has application for personnel in the areas of Internal Affairs, Criminal Investigations, IT support and supervisory personnel involved in these areas. This course has application at the investigative level of the organization and for supervisors.
COURSE COMPOSITION
1.2 Investigative Approach..............................1.0 hrs
1.3 Evidence Acquisition..................................1.5 hrs
1.4 Operating Systems....................................1.5 hrs
1.5 File System Analysis...................................2.0 hrs
1.6 Forensic Tools...........................................2.0 hrs
1.7 Practical Exercises/Course Summary..............3.0 hrs
Total Hours....................................................12.0 hrs
Course Goals
Upon completion of this seminar, the participants will be able to:
- Understand the investigative forensic tools that are available in the community of software and how to acquire those tools
- Understand operating systems and file systems and how to extract information from them
- Understand and use document retrieval information and how to maintain that information in a usable format