Courses & Workshops

Have questions about training?     Contact us

DF320 - Advanced Analysis of Windows Artifacts with EnCase®

Duration: 4 Days

**Formerly EnCase Advanced Computer Forensics

This hands-on course is designed for examiners with solid computer skills, seeking to learn advanced concepts in analyzing Windows artifacts. The participants will be provided instruction that includes parsing and analysis techniques on registry data, volume shadow service, random access memory, zip file structures, prefetch, and SQLite content.

Delivery method: Group-Live. NASBA defined level: advanced.

CPE Credits - 32

Audience

This course is intended for law enforcement officers, computer forensic examiners, corporate and private investigators, and network security personnel. A basic understanding of the concepts of computer forensics is required. The class curriculum builds upon the foundation of the DF320-Building an Investigation course, continuing with a focus on file and operating system examinations.

Prerequisites

DF210 - Building an Investigation with EnCase or EnCE® Certification.

Summary:

This course provides in-depth coverage on topics, including:

  • Examination of the Microsoft Windows Registry
  • The use of block-based file hash analysis for file recovery
  • Examination of Volume Shadow Copy (VSC) data maintained by the Windows Volume Shadow Service (VSS)
  • Examination and recovery of Windows event logs
  • Hardware and software RAID technology, acquisition, and examination
  • Understanding SQLite databases and querying their data
  • Recovering deleted SQLite data
  • The purpose and function of prefetch files and how to analyze them
  • Principles of encrypted data recovery
  • Various techniques on the examination RAM
  • Low-level data recovery from Zip files and the latest version of Microsoft Word documents

Pricing

Format Currency Price
Per Student at Open Text Site €  2,227.50 
Per Student at Open Text Site GBP  1,952.50 
Per Student at Open Text Site USD  2,750.00 

Taxes: All prices exclude VAT or other taxes where applicable (all currencies).

Extra expenses: Customer site course prices do not include instructor travel expenses, which are billed separately.

Reservations: Please provide a minimum of 3 weeks advance notice when arranging courses at customer sites.

Course & Workshop Calendar

Below is a listing of all the currently available dates and locations for this course and/or workshop from Open Text.

Selection & Registration Process

Before you can register for a course or workshop, you need to select which one you want to attend. To do this, simply click on the "Add to cart" link and it will be added to your shopping cart.

Note: After clicking on the "Add to cart" link, you will be taken to the main course and workshop selection page where all of the courses and workshops you have added to your shopping cart will appear at the top of the page.

Once you have selected all the courses and workshops you want to attend, simply select the "Check-out link and complete the registration form.

Date Course Type Course Name Language Location Price Add
Oct 23, 2018  On-site  DF320 - Advanced Analysis  English  Virtual Classroom - North America GSI Eastern Time 2,750.00  Add to Cart 
Oct 23, 2018  On-site  DF320 - Advanced Analysis  English  GSI-Washington, DC 2,750.00  Add to Cart 
Dec 04, 2018  On-site  DF320 - Advanced Analysis  English  GSI-Reading 1,952.50  Add to Cart 
Dec 04, 2018  On-site  DF320 - Advanced Analysis  English  Virtual Classroom - Europe GSI UK Time 1,952.50  Add to Cart 
Jan 15, 2019  On-site  DF320 - Advanced Analysis  English  GSI-Washington, DC 2,750.00  Add to Cart 
Jan 15, 2019  On-site  DF320 - Advanced Analysis  English  Virtual Classroom - North America GSI Eastern Time 2,750.00  Add to Cart 
Feb 05, 2019  On-site  DF320 - Advanced Analysis  English  GSI-Pasadena 2,750.00  Add to Cart 
Mar 19, 2019  On-site  DF320 - Advanced Analysis  English  GSI-Reading 1,952.50  Add to Cart 
May 21, 2019  On-site  DF320 - Advanced Analysis  English  GSI-Washington, DC 2,750.00  Add to Cart 
Jun 18, 2019  On-site  DF320 - Advanced Analysis  English  GSI-Pasadena 2,750.00  Add to Cart 
Jun 18, 2019  On-site  DF320 - Advanced Analysis  English  Virtual Classroom - North America GSI Pacific Time 2,750.00  Add to Cart 
Jun 25, 2019  On-site  DF320 - Advanced Analysis  English  GSI-Reading 1,952.50  Add to Cart 
Jun 25, 2019  On-site  DF320 - Advanced Analysis  English  Virtual Classroom - Europe GSI UK Time 1,952.50  Add to Cart