DFIR130 - EnCase Endpoint Investigator Training

Have questions about training?   Contact us

Duration: 2 Days

This hands-on course involves practical exercises and real-life simulations in the use of OpenText™ EnCase™ Endpoint Investigator. The class provides participants with instruction on configuring EnCase Endpoint Investigator and how to use it to conduct previews, acquisitions, and searches. The course concludes with instruction on using bookmarking functionality to build a comprehensive case report.

Delivery method: Classroom. NASBA defined level: basic.

CPE Credits - 16

Audience

This course is intended to provide new or prospective users of the EnCase Endpoint Investigator software with a good working knowledge of the product in the shortest time. The focus is very much on practical configuration, navigation, and usability in a network environment. It is relevant to anyone who is likely to use the software for the preview, acquisition, and analysis of remote data. Participants may have minimal computer skills and be new to the field of computer forensics

Prerequisites

Basic computer skills. Advance preparation for this course is not required.

Summary

Students attending this course will learn the following:

  • How to configure the Secure Authentication of EnCase (SAFE) server software.
  • How to deploy the agent, which enables the examination of network nodes remotely.
  • How to preview and acquire remote data, both at a physical (sector-by-sector) level and logically.
  • How to preview and acquire physical memory (RAM) and capture a snapshot of volatile data, including open ports and running processes.
  • How to navigate, filter, sort, and search data shown in the EnCase Endpoint Investigator interface.
  • How to use the Evidence Processor to identify Internet artifacts.
  • How to bookmark notable data and build a comprehensive case report.

 Course Syllabus

Pricing

Format Currency Price
Per Student at OpenText Site 1,400.00
Per Student at OpenText Site GBP 1,100.00
Per Student at OpenText Site USD 1,600.00

Taxes: All prices exclude VAT or other taxes where applicable (all currencies).

Extra expenses: Customer site course prices do not include instructor travel expenses, which are billed separately.

Reservations: Please provide a minimum of 3 weeks advance notice when arranging courses at customer sites.

Course and workshop calendar

Below is a listing of all the currently available dates and locations for this course or workshop from OpenText.

Start Date End Date Start Time TimeZone Session Duration Language Location Price Currency Guaranteed To Run Add
May 24, 2022 May 25, 2022 08:00 (UTC-07:00) America/Los_Angeles (PDT) Full Day English GSI-Pasadena, CA 1,600.00 USD Join wait list
May 24, 2022 May 25, 2022 08:00 (UTC-07:00) America/Los_Angeles (PDT) Full Day English Virtual Classroom - North America GSI Pacific Time 1,600.00 USD Join wait list
Aug 02, 2022 Aug 03, 2022 08:00 (UTC-04:00) America/New_York (EDT) Full Day English GSI-Gaithersburg, MD 1,600.00 USD Add to cart
Aug 02, 2022 Aug 03, 2022 08:00 (UTC-04:00) America/New_York (EDT) Full Day English Virtual Classroom - North America GSI Eastern Time 1,600.00 USD Add to cart
Sep 13, 2022 Sep 14, 2022 08:00 (UTC-07:00) America/Los_Angeles (PDT) Full Day English GSI-Pasadena, CA 1,600.00 USD Add to cart
Sep 13, 2022 Sep 14, 2022 08:00 (UTC-07:00) America/Los_Angeles (PDT) Full Day English Virtual Classroom - North America GSI Pacific Time 1,600.00 USD Add to cart
Oct 04, 2022 Oct 05, 2022 08:00 (UTC+01:00) Europe/London (BST) Full Day English Virtual Classroom - Europe GSI UK Time 1,100.00 GBP Add to cart
Oct 04, 2022 Oct 05, 2022 08:00 (UTC+01:00) Europe/London (BST) Full Day English GSI-Reading, UK 1,100.00 GBP Add to cart
Dec 06, 2022 Dec 07, 2022 08:00 (UTC+00:00) Europe/London (GMT) Full Day English Virtual Classroom - Europe GSI UK Time 1,100.00 GBP Add to cart
Dec 06, 2022 Dec 07, 2022 08:00 (UTC+00:00) Europe/London (GMT) Full Day English GSI-Reading, UK 1,100.00 GBP Add to cart