DF120 - Foundations in Digital Forensics with EnCase - On Demand

Duration: 32 Hours

**Formerly Computer Forensics I.

This OnDemand course involves practical exercises and real-life simulations in the use of OpenText™ EnCase™ software (EnCase). The class provides participants with an understanding of how EnCase may be used to examine data related to an incident response, an employee misconduct investigation, and/or a law enforcement criminal and/or civil investigation. Participants create cases using EnCase, configure the application to maximize its utilization, and learn evidence acquisition concepts and how to validate the data collected. Instruction progresses to the analysis of the data whether related to criminal investigations, cybersecurity incidents, or other matters. The course will cover techniques, such as keyword or indexed searching along with hash analysis. Participants will learn how to bookmark, export, and create reports relating to examination findings. The course concludes with instruction on archiving, validating the data, and restoring the case.

CPE Credits - 0

Students attending this course will learn the following:

• The EnCase digital forensic methodology
• How to navigate the EnCase interface
• How to extract data and files from your evidence
• How to bookmark evidence files, file sets, and data structures
• How to conduct raw and index searches
• How to analyze file signatures and view files
• How to conduct hash and entropy analyses and import hash sets
• How to import and export data to and from Project VIC
• How to install external file viewers to EnCase
• How to prepare reports, using templates provided with EnCase
• How to create a report template
• How to restore evidence
• How to archive files and data created through the analysis process
• The proper techniques for handling and preserving evidence

SYSTEM REQUIREMENTS

• A desktop/laptop computer.
  • Microsoft® Windows operating system is recommended.
• Internet access
• Latest Adobe® Reader software http://www.adobe.com
• Some courses offer the ability to conduct optional practical exercises on a remote workstation. Chrome and Firefox are recommended.

***Security Edition subscription holders may only be registered in two (2) Training OnDemand courses concurrently

You are registering for an online class. EnCase Training OnDemand courses can be accessed online 24/7.

Contact:encasetraining@opentext.com

1-626-463-7966

TERMS & CONDITIONS

• Access to the course materials for our EnCase Training OnDemand classes will be granted once payment is received.
• The Training OnDemand courses are valid one year from the date of purchase.
• Once a course is accessed, the student will have 60 days to complete the course
• Each Training OnDemand course can only be taken once.
• Students can only be enrolled in two Training OnDemand classes concurrently.
• PHYSICAL MANUALS ARE NOT AVAILABLE FOR TRAINING ONDEMAND COURSES.
• A timed eBook will be assigned for each course and can be viewed for one year. Printing and copying of eBooks are prohibited by the DMR application.

The professional services and/or learning services (if applicable) set out in this quotation will be provided pursuant to the OpenText Professional Services Program Handbook applicable to the services being purchased (available at www.opentext.com/agreements ) For your reference, the direct link to the Handbook is here: https://www.opentext.com/file_source/OpenText/en_US/PDF/opentext-encase-program-handbook-en.pdf

Audience

This course is intended for digital forensic investigators, including law enforcement, government, military, corporate, IT security, and litigation support professionals. Participants may have minimal computer skills and may be new to the field of computer forensics.

Prerequisites

Basic computer skills. Advance preparation for this course is not required.