4-day Advanced Level Course

Course Overview

The Advanced Windows® 10 Forensic analysis class is an expert-level four-day training course, designed for examiners who are familiar with the principles of digital forensics and keen to expand their knowledge on advanced forensics using a host of third-party tools to improve their computer investigations.

The Spyder Forensic Advanced Windows® 10 Forensic Analysis course will give participants unbiased knowledge and skills necessary to analyze artifacts left behind through system and user interaction with the host system, utilizing industry standard tools and open source applications to explore the data in greater depth by learning how applications function and store data in the file system.

Students will learn to use various applications and utilities to successfully identify, process, understand and document numerous Windows® artifacts that are vitally important to forensic investigations. The participant will also gain knowledge on how to process browser artifacts, learn how BitLocker encryption functions, gain in-depth knowledge of SQL analysis to prepare for the analysis of Windows® Action Center, TimeLine and other Windows® 10 data stored in these databases. The course includes gaining in-depth knowledge of JumpLists, Registry analysis and prefetch files and how they relate to forensic investigations and conclude with an in-depth look at OneDrive and synchronization processes between trusted devices.

Students will use a variety of open source and leading forensic applications to examine key artifacts through multiple hands-on labs and student practicals.

Click here to inquire about this course

4-day Advanced Level Course

Course Overview

The Advanced Windows® 10 Forensic analysis class is an expert-level four-day training course, designed for examiners who are familiar with the principles of digital forensics and keen to expand their knowledge on advanced forensics using a host of third-party tools to improve their computer investigations.

The Spyder Forensic Advanced Windows® 10 Forensic Analysis course will give participants unbiased knowledge and skills necessary to analyze artifacts left behind through system and user interaction with the host system, utilizing industry standard tools and open source applications to explore the data in greater depth by learning how applications function and store data in the file system.

Students will learn to use various applications and utilities to successfully identify, process, understand and document numerous Windows® artifacts that are vitally important to forensic investigations. The participant will also gain knowledge on how to process Edge browser history, cookies, temp files InPrivate browsing challenges and analysis, BitLocker encryption, Windows® Action Center, TimeLine and other Windows® 10 specific artifacts. The course includes gaining in-depth knowledge of JumpLists, Registry analysis and prefetch files and how they relate to forensic investigations and conclude with an in-depth look at OneDrive and synchronization processes between trusted devices.

Students will use a variety of open source and leading forensic applications to examine key artifacts through multiple hands-on labs and student practicals.

Click here to inquire about this course

5-Day Foundation Level Course

This Cryptocurrency Foundation Course for Investigators is a hands-on practical 5-day training program designed for investigators who want to advance their knowledge of bitcoin, the blockchain, cryptocurrency, and its criminal applications.

Students will learn about a variety of private key hiding places, see examples of “hidden in plain sight” private keys and practice a search of a hidden private key in plain sight.
Attendees will know the purpose and functionality of typical crypto exchanges and visit several exchanges.

Participants will understand the similarities and differences between and ICO and an IPO, articulate how cryptocurrencies are launched and discuss the process of a pump and dump scheme. Students will gain knowledge about coins and tokens, describe how tokens gain value and differentiate between utility tokens and security tokens.

Course participants will become proficient in Bitcoin and Altcoin basics, the Blockchain, cryptocurrencies wallets, exchanges, transactions, and do hands-on exercises on the five most common Hardware Wallets.

Click here to inquire about this course

4-day Advanced Level Course

This 4-Day intermediate class is designed to provide the student with the skills and techniques to response to a cyber intrusion incident. The students will learn the anatomy of an intrusion, collection of memory and volatile artifacts, and techniques to unravel the mystery of how the network was compromised.

The course will follow adult learning principles through training aids such as presentations, diagrams and practical instructor lead examples. Each artifact covered will be presented in either one or two 50 minute sessions followed by review questions. Students will be given the opportunity throughout the course to ask questions and discuss objectives covered in more detail. Throughout each day students will have practical exercises to work on in order to reinforce the topics with a final practical at the culmination of the training.

This hands-on course is geared towards forensic investigators with 6+ months experience in forensic case work with a basic understanding of Microsoft data structures.

Course Price: $2,495

About the Trainer

Charles Giglia has been in the field of computer forensics since 2000 concentrating primarily on the research and development of computer forensic investigative techniques and training curriculum. Charles has an undergraduate degree in mathematics from Canisius College and a graduate degree in forensic science from the University of New Haven. Charles had been deployed nearly 18 months from 2007 to 2009 doing computer forensic investigations in support of Operation Iraqi Freedom while serving as a U.S. Army Contractor in Baghdad. Previously he spent six years as a Computer Crime Specialist with the NW3C while leading the development of numerous training classes. His primary concentrations were courses related to Internet investigations and Internet forensics. Charles has been a guest presenter at the FBI training academy, as well as several IACIS, FACT, RCFG/GMU, HTCIA international/regional conferences and an adjunct professor at Fairmont State College. He is a Certified Forensic Computer Examiner (CFCE) and a Red Hat Certified Engineer (RHCE).

Click here to inquire about this course

5-Day Advanced Level Course

This Advanced Cryptocurrency Investigator Course is a hands-on practical 5-day multi-instructor-led interactive program designed for law enforcement officials, intelligence analysts, and investigators who want to significantly advance their cryptocurrency investigation and seizure skills. Participants will gain valuable knowledge and a high level of competence through “doing” instead of just watching.

Through a rigorous program of exercises students will become fully practiced and confident in their ability to identify, recover, seize, and restrain cryptocurrencies quickly, securely and properly. Participants will gain critical experience in Cold Storage and the proper transfer of cryptocurrency from a suspect’s wallet to an agency owned wallet during the execution of a search warrant.

Working with different devices participants will learn how to efficiently use the 25 most common hardware wallets, utilize, crack, recover and update different versions of firmware for a variety of hardware wallets, and restore wallets from corrupted devices such as desktops, tablets, and mobile devices. Participants will be accomplished in creating a blockchain, developing their own Tokens, running a node and creating smart contracts all on their own.

Law enforcement, intelligence analysts, and investigators will gain experience in establishing an agency wallet, identifying evidence of cryptocurrency on devices using the advanced search and forensic techniques, identifying paper wallets, finding hidden or obscure cold storage hiding places and discovering hidden Mnemonic BIP39 seeds. After that, participants will go through a rigorous program of exercises and practice the proper seizure, transfer, and storage of cryptocurrency funds.

Participants will know how to secure storage of cryptocurrency to prevent, avoid bad seized cryptocurrency transfers, and recover from a bad seized currency transfer if that happens. Through hands-on practical exercises, participants will become proficient in their ability to decrypt cryptocurrency wallets, recover Private Key QR Codes, perform independent BIP38 password recovery, and access inaccessible wallets.

Click here to inquire about this course

5-Day Advanced Level Course

This Advanced Cryptocurrency Investigator Course is a hands-on practical 5-day multi-instructor-led interactive program designed for law enforcement officials, intelligence analysts, and investigators who want to significantly advance their cryptocurrency investigation and seizure skills. Participants will gain valuable knowledge and a high level of competence through “doing” instead of just watching.

Through a rigorous program of exercises students will become fully practiced and confident in their ability to identify, recover, seize, and restrain cryptocurrencies quickly, securely and properly. Participants will gain critical experience in Cold Storage and the proper transfer of cryptocurrency from a suspect’s wallet to an agency owned wallet during the execution of a search warrant.

Working with different devices participants will learn how to efficiently use the 25 most common hardware wallets, utilize, crack, recover and update different versions of firmware for a variety of hardware wallets, and restore wallets from corrupted devices such as desktops, tablets, and mobile devices. Participants will be accomplished in creating a blockchain, developing their own Tokens, running a node and creating smart contracts all on their own.

Law enforcement, intelligence analysts, and investigators will gain experience in establishing an agency wallet, identifying evidence of cryptocurrency on devices using the advanced search and forensic techniques, identifying paper wallets, finding hidden or obscure cold storage hiding places and discovering hidden Mnemonic BIP39 seeds. After that, participants will go through a rigorous program of exercises and practice the proper seizure, transfer, and storage of cryptocurrency funds.

Participants will know how to secure storage of cryptocurrency to prevent, avoid bad seized cryptocurrency transfers, and recover from a bad seized currency transfer if that happens. Through hands-on practical exercises, participants will become proficient in their ability to decrypt cryptocurrency wallets, recover Private Key QR Codes, perform independent BIP38 password recovery, and access inaccessible wallets.

Click here to inquire about this course

4-day Advanced Level Course

Course Overview

The Advanced Windows® 10 Forensic analysis class is an expert-level four-day training course, designed for examiners who are familiar with the principles of digital forensics and keen to expand their knowledge on advanced forensics using a host of third-party tools to improve their computer investigations.

The Spyder Forensic Advanced Windows® 10 Forensic Analysis course will give participants unbiased knowledge and skills necessary to analyze artifacts left behind through system and user interaction with the host system, utilizing industry standard tools and open source applications to explore the data in greater depth by learning how applications function and store data in the file system.

Students will learn to use various applications and utilities to successfully identify, process, understand and document numerous Windows® artifacts that are vitally important to forensic investigations. The participant will also gain knowledge on how to process Edge browser history, cookies, temp files InPrivate browsing challenges and analysis, BitLocker encryption, Windows® Action Center, TimeLine and other Windows® 10 specific artifacts. The course includes gaining in-depth knowledge of JumpLists, Registry analysis and prefetch files and how they relate to forensic investigations and conclude with an in-depth look at OneDrive and synchronization processes between trusted devices.

Students will use a variety of open source and leading forensic applications to examine key artifacts through multiple hands-on labs and student practicals.

Course price: $2,495

Click here to inquire about this course

About the Trainer

Rob has almost 2 decades of experience developing and presenting training on Digital Forensics, Cyber Security, Mobile Forensics and eDiscovery education programmes for the global digital investigations community. As a long term member of the International Association of Computer Investigative Specialists (IACIS), Rob instructs regularly at the association’s annual conferences and is a lead instructor for the Advanced Windows Forensic course as well as regularly presenting at the premier international digital forensics conferences such as High Technology Crime Investigation Association, Department of Defence Cyber Crime, F3 Annual Workshops and Internet Crimes against Children taskforce. Rob has contributed to digital forensic publications and is a subject matter expert to various course for the ATA program managed by the State Department in the USA. Rob continually develops solutions to identify and report on new forensic artifacts on emerging technologies which he shares on open and closed forums.

5-Day Foundation Level Course

This Cryptocurrency Foundation Course for Investigators is a hands-on practical 5-day training program designed for investigators who want to advance their knowledge of bitcoin, the blockchain, cryptocurrency, and its criminal applications.

Students will learn about a variety of private key hiding places, see examples of “hidden in plain sight” private keys and practice a search of a hidden private key in plain sight.
Attendees will know the purpose and functionality of typical crypto exchanges and visit several exchanges.

Participants will understand the similarities and differences between and ICO and an IPO, articulate how cryptocurrencies are launched and discuss the process of a pump and dump scheme. Students will gain knowledge about coins and tokens, describe how tokens gain value and differentiate between utility tokens and security tokens.

Course participants will become proficient in Bitcoin and Altcoin basics, the Blockchain, cryptocurrencies wallets, exchanges, transactions, and do hands-on exercises on the five most common Hardware Wallets.

Click here to inquire about this course

4-day Advanced Level Course

Course Overview

The Advanced Windows® 10 Forensic analysis class is an expert-level four-day training course, designed for examiners who are familiar with the principles of digital forensics and keen to expand their knowledge on advanced forensics using a host of third-party tools to improve their computer investigations.

The Spyder Forensic Advanced Windows® 10 Forensic Analysis course will give participants unbiased knowledge and skills necessary to analyze artifacts left behind through system and user interaction with the host system, utilizing industry standard tools and open source applications to explore the data in greater depth by learning how applications function and store data in the file system.

Students will learn to use various applications and utilities to successfully identify, process, understand and document numerous Windows® artifacts that are vitally important to forensic investigations. The participant will also gain knowledge on how to process Edge browser history, cookies, temp files InPrivate browsing challenges and analysis, BitLocker encryption, Windows® Action Center, TimeLine and other Windows® 10 specific artifacts. The course includes gaining in-depth knowledge of JumpLists, Registry analysis and prefetch files and how they relate to forensic investigations and conclude with an in-depth look at OneDrive and synchronization processes between trusted devices.

Students will use a variety of open source and leading forensic applications to examine key artifacts through multiple hands-on labs and student practicals.

About the Trainer

Rob has almost 2 decades of experience developing and presenting training on Digital Forensics, Cyber Security, Mobile Forensics and eDiscovery education programmes for the global digital investigations community. As a long term member of the International Association of Computer Investigative Specialists (IACIS), Rob instructs regularly at the association’s annual conferences and is a lead instructor for the Advanced Windows Forensic course as well as regularly presenting at the premier international digital forensics conferences such as High Technology Crime Investigation Association, Department of Defence Cyber Crime, F3 Annual Workshops and Internet Crimes against Children taskforce. Rob has contributed to digital forensic publications and is a subject matter expert to various course for the ATA program managed by the State Department in the USA. Rob continually develops solutions to identify and report on new forensic artifacts on emerging technologies which he shares on open and closed forums.

Click here to inquire about this course

3-day Advanced Level Course

Course Overview

This three-day course will equip you with the practical skills to identify and extract multiple sources of data from drones and their associated controlling devices, in line with recognized best practice.

The Spyder Forensics Drone course will teach investigators and forensic examiners workflows and best practices in the recovery and analysis of small unmanned aircraft systems (sUAS) – Drones. Delegates of the course will learn new skills in capturing data from the aircraft, it’s controller and mobile application in a none invasive or destructive process.

Combining leading research from Spyder Forensics and recognized international universities, this course will equip you with the skills necessary to forensically conduct extractions from all elements of UAV system devices and perform analysis of flight data for use as intelligence or as evidence to support the conviction of illegal use.

Primary Learning Objectives 

• Drone threat analysis
• Discuss uses in legitimate usage and criminal activities
• Extraction methods of all storage media (nondestructive or invasive techniques)
• Recognize types of data available from drones, their linked devices, and third-party sources
• Conduct forensic extractions of data from the leading drone devices
• Analyze extracted data effectively to produce reports fit for use in criminal justice proceedings
• Learn how to produce a forensic report to support examination of UAV

Click here to inquire about this course

About the Trainer

Rob has almost 2 decades of experience developing and presenting training on Digital Forensics, Cyber Security, Mobile Forensics and eDiscovery education programmes for the global digital investigations community. As a long term member of the International Association of Computer Investigative Specialists (IACIS), Rob instructs regularly at the association’s annual conferences and is a lead instructor for the Advanced Windows Forensic course as well as regularly presenting at the premier international digital forensics conferences such as High Technology Crime Investigation Association, Department of Defence Cyber Crime, F3 Annual Workshops and Internet Crimes against Children taskforce. Rob has contributed to digital forensic publications and is a subject matter expert to various course for the ATA program managed by the State Department in the USA. Rob continually develops solutions to identify and report on new forensic artifacts on emerging technologies which he shares on open and closed forums.

5-day Foundations Course – Live Remote

What is Live Remote Synchronous Training?

Remote Synchronous Training (RST) allows the attendee to participate in a structured training courses remotely, in the comfort of your own office. It eliminates travel costs and provides a fully interactive environment, just like being in the classroom! RST delivery is specifically designed to simulate a live learning environment. Students have two-way communication with the instructor as well as the other students in the class using a typical hardware setup from their remote location. Instructors can monitor and interact with all students at the same time. When needed, instructors can assist students by physically interacting with his/her assigned machine in the Spyder Forensics remote classroom.

Why choose a Remote class?

Content is delivered exactly the same as in our live classes · Full interaction with the trainer and other course attendees · No travel costs and enjoy the class at your preferred location · Receive the same courseware as an in-person class, i.e. 400+ page color printed student manual for post class reference, USB with datasets and student files · Use of unique datasets developed by Spyder Forensics covering all artifacts covered in this class and others in our curriculum · Post class access the Spyder Forensics Academy (LMS) for supplementary courseware and online electronic version of the training manual

What you will need:

A computer (Windows or Apple) connected to the internet allowing access to GoToTraining™ for instructor delivery and RemotePC™ to interact with the remote classroom PC · A microphone to interact via voice with the class (not required as Chat window is always available) · Speakers to hear the class being delivered · Preferred 2 monitors to open multiple windows (GoToTraining and RemotePC windows)

What you will receive:

Printed course manual · USB containing course files · Access to the Spyder Forensics Academy · Course certificate

Course Overview

This is a five-day course is designed for the investigator/examiner entering the field of digital forensics and provides the fundamental knowledge to comprehend and investigate incidents involving electronic devices. The course covers in depth architecture and functionality of the NTFS and FAT File Systems and their related metadata pertaining to stored objects on the physical media.

Attendees will gain insight into partitioning structures and disk layouts and the effects of formatting volumes that contain existing data. File management and directory structure characteristics will be examined in detail as well as techniques for discovering potential evidence that maybe pivotal to a successful examination. This will be followed by topical areas of interest to include file headers and file hashing and recovery of deleted files and basic analysis of a windows-based system.  This course incorporates an investigative scenario, providing hands-on experience with examination of collected evidence.

Students will use a variety of open source and leading forensic applications to examine key artifacts through multiple hands-on labs and student practicals.

Click here to inquire about this course

About the Trainer

A dedicated professional with extensive exposure and experience in all concepts of adult learning. Specializes in the business development, management and delivery of world class training programs for global corporations. An excellent communicator with exceptional interpersonal, organizational, leadership and coaching skills. Detail orientated, organized and capable of motivating both individuals and teams to succeed and deliver on organizational goals. A global leader with over a decade of international business experience.  https://www.linkedin.com/in/robattoe/

4-day Advanced Level Course – Live Remote

What is Live Remote Synchronous Training?

Remote Synchronous Training (RST) allows the attendee to participate in a structured training courses remotely, in the comfort of your own office. It eliminates travel costs and provides a fully interactive environment, just like being in the classroom! RST delivery is specifically designed to simulate a live learning environment. Students have two-way communication with the instructor as well as the other students in the class using a typical hardware setup from their remote location. Instructors can monitor and interact with all students at the same time. When needed, instructors can assist students by physically interacting with his/her assigned machine in the Spyder Forensics remote classroom.

Why choose a Remote class?

Content is delivered exactly the same as in our live classes · Full interaction with the trainer and other course attendees · No travel costs and enjoy the class at your preferred location · Receive the same courseware as an in-person class, i.e. 400+ page color printed student manual for post class reference, USB with datasets and student files · Use of unique datasets developed by Spyder Forensics covering all artifacts covered in this class and others in our curriculum · Post class access the Spyder Forensics Academy (LMS) for supplementary courseware and online electronic version of the training manual

What you will need:

A computer (Windows or Apple) connected to the internet allowing access to GoToTraining™ for instructor delivery and RemotePC™ to interact with the remote classroom PC · A microphone to interact via voice with the class (not required as Chat window is always available) · Speakers to hear the class being delivered · Preferred 2 monitors to open multiple windows (GoToTraining and RemotePC windows)

What you will receive:

Printed course manual · USB containing course files · Access to the Spyder Forensics Academy · Course certificate

Course Overview

The Advanced Windows® 10 Forensic analysis class is an expert-level four-day training course, designed for examiners who are familiar with the principles of digital forensics and keen to expand their knowledge on advanced forensics using a host of third-party tools to improve their computer investigations.

The Spyder Forensic Advanced Windows® 10 Forensic Analysis course will give participants unbiased knowledge and skills necessary to analyze artifacts left behind through system and user interaction with the host system, utilizing industry standard tools and open source applications to explore the data in greater depth by learning how applications function and store data in the file system.

Students will learn to use various applications and utilities to successfully identify, process, understand and document numerous Windows® artifacts that are vitally important to forensic investigations. The participant will also gain knowledge on how to process Edge browser history, cookies, temp files InPrivate browsing challenges and analysis, BitLocker encryption, Windows® Action Center, TimeLine and other Windows® 10 specific artifacts. The course includes gaining in-depth knowledge of JumpLists, Registry analysis and prefetch files and how they relate to forensic investigations and conclude with an in-depth look at OneDrive and synchronization processes between trusted devices.

Students will use a variety of open source and leading forensic applications to examine key artifacts through multiple hands-on labs and student practicals.

Click here to inquire about this course

About the Trainer

A dedicated professional with extensive exposure and experience in all concepts of adult learning. Specializes in the business development, management and delivery of world class training programs for global corporations. An excellent communicator with exceptional interpersonal, organizational, leadership and coaching skills. Detail orientated, organized and capable of motivating both individuals and teams to succeed and deliver on organizational goals. A global leader with over a decade of international business experience.  https://www.linkedin.com/in/robattoe/