ICAC-STOP Class List

ICAC-CI 101 - Secure Techniques for Onsite Previewing

This course is funded through OJJDP. To register for this class, you must be affiliated with an ICAC Task Force. Furthermore, you must agree to comply with the Best Practices and Standards established by ICAC. If you have any questions about the ICAC Best Practices and Standards, please contact your ICAC commander.

STOP covers the usage and configuration of two tools (WinFE and osTriage) designed to preview a non-mobile digital device and export files of evidentiary value. Students who bring the suggested materials listed above will be able to leave STOP with the same setup shown in class. Other topics include a detailed examination of the process of previewing: what previewing is, why and when it should be done, who can conduct a preview, and differences in procedure for starting a preview depending on whether a device is on or off.

• What is previewing? Learn why you should preview, who can perform a preview, when to conduct a preview, and how to start a preview whether a device is on or off.
• WinFE. Forensically boot a device, then quickly preview and export digital evidence found on scene.
• OsTriage. Identify when encryption is present, image RAM memory, display browser history, preview and export existing files, and much more.
• Hands-on experience. Work with WinFE and OsTriage, and leave the course with the same setup shown in class.

STOP is a 2-day classroom course.

Prerequisites:
• CI 099 – Basic Computer Skills for Law Enforcement (BCS-WB) online course  Register
• CI 100 – Identifying & Seizing Electronic Evidence (ISEE-WB) online course  Register

Do the following before coming to class:

• Download Windows 10 Single Language 32 bit ISO http://bit.ly/Win1032Bit
• Bring an external hard drive (500GB minimum)

There are currently no scheduled classes for this course. If you are interested in knowing when the next class might be offered or would like more information in general please see the training contact information on this page.


Back to List

Forensics Tool Testing

National Institute of Standards and Technology

In an effort to enhance its support for law enforcement at the state and local level, NW3C participates in the National Institute of Standards and Technology’s Computer Forensics Tool Testing (CFTT) steering committee.

More . . .

Hosting NW3C Classes

If you are interested in hosting NW3C’s training in your area please review the appropriate information below. Note that your agency will be allowed to reserve seats for the class(es) and must meet the criteria described in the document associated with the type of hosting you request.


Training Contacts

Instructor Led
Phone:   (877) 628-7674
Email: training@nw3c.org

Online
Email:     onlinelearning@nw3c.org


NW3C Social Media Channels

© 2012. NW3C, Inc. d/b/a the National White Collar Crime Center. All Rights Reserved.
Disclaimer | Privacy Policy | Sitemap