Foundations in Digital Forensics – Certification Course (Hampshire, UK – Live On site)
5-day Certification Intermediate Course
Course Overview
This is a 5-day certification course is designed for the investigator/examiner entering the field of digital forensics and provides the fundamental knowledge to comprehend and investigate incidents involving electronic devices. The course covers in depth architecture and functionality of NTFS, FAT and exFAT File Systems and their related metadata pertaining to stored objects on the physical media. Attendees will gain insight into partitioning structures and disk layouts and the effects of formatting volumes that contain existing data. File management and directory structure characteristics will be examined in detail as well as techniques for discovering potential evidence that maybe pivotal to a successful examination. On Day 5 Students will learn of core artifacts of interest in a Windows based examination, focusing on user interaction with files and applications through typical daily use. This is a certification course where attendees can participate in the optional exam conducted at the conclusion of the course.
Students will use a variety of open source and leading forensic applications to examine key artifacts through multiple hands on labs and student practical’s.