DF205 Intermediate Digital Forensic Analysis: SQLite Primer  (1 Day)


Live Online Training
Wed 05/10/2023
8:00 AM - 4:00 PM Pacific
Class

This training is intended for U.S. Criminal Justice Practitioners. Please register using your agency-issued email.

Course Description
Mobile devices dominate the intake list and desks of most digital forensic analysts globally. As devices are becoming more secure, with an increase in security the need for detailed analysis is increasing as well. SQLite is a self-contained, serverless database engine. It is found on nearly every operating system and dominates iOS®, Android®, and macOS as one of the most prevalent and relevant data storage mechanisms. Rather than hope our forensic tools support the newest applications or be tethered to how a certain utility parses data, we can arm ourselves with the skills and techniques needed to conquer the analysis of nearly any application.

Key concepts covered in this course include:
     • What is SQLite and how to identify and analyze logically 
     • Recognizing relevant locations of valuable data within SQLite database
     • Develop skills needed for crafting custom SQLite queries
     • Recognize and decode a variety of common timestamp formats
     • Perform SQLite analysis with automation 

Students who complete this course and pass the post-test are eligible for 1.0 point toward the 3CE certification.


Recommended Skills
This is an intermediate course intended for digital forensic examiners who have a solid understanding of digital forensic principles, experience preserving and acquiring data of evidentiary value, and have a minimum of six months of experience performing digital forensic examinations.

Cancellation
NW3C may cancel any class for any reason and without notice. NW3C is not responsible for non-refundable travel accommodations lost or rendered moot as a result of a class cancellation.


Computer Requirements
The hands-on practical exercises are intensive, critical to understanding the material being taught, and required to successfully complete the class. If your computer hardware does not meet the mandatory requirements listed below, your experience in taking the class will be less than ideal and may also impact other students while the instructors take time to troubleshoot hardware and software problems.

Mandatory Operating System Requirements
Operating system. Your computer must be running Microsoft windows 10 or later or macOS v10.12 or later. Make sure your operating system is fully updated prior to class.
Smartphones and tablets are prohibited.
Local administrator access is required. If you do not have administrative rights, you will not be able to successfully complete the class. Prior to class, please check with your IT department to install the required software.
Disconnect your VPN. Disconnect your work virtual private network (VPN). Being connected to the Internet through a VPN can block access to the virtual lab environment.

Mandatory Software Requirements
Citrix Workspace App. Required to access our virtual lab environment and to complete the required hands-on practical exercises.
Google Chrome. The recommended browser to launch our virtual lab environment.
Webex Meetings. Required to enter our live online training environment, Webex Training Center.
Webex Chrome Extension. Required to launch our live online training environment, Webex Training Center, and works hand-in-hand with the Webex Meetings application.

Mandatory Hardware Requirements
Dual monitors. You will need one monitor to join the online classroom, view presentations, see the instructor’s shared screen, and interact with the instructor(s). The second monitor is needed to join and use the virtual lab environment to complete hands-on practical exercises. Not being able to see both interfaces (the online classroom, and virtual lab environment) simultaneously will make it difficult, if not impossible to successfully complete hands-on practical exercises. Large screen monitors, trying to run the two different interfaces split screen, will NOT work. Multiple computers can also work as a substitute to having multiple monitors.
Hard-wired, high-speed Internet connection. A wireless Internet connection may be sufficient, however, a wired connection will improve latency and buffering, and will also provide better connection speeds and stability overall.
Microphone and speakers. This is an interactive, live training class and a microphone is required to interact with the instructor(s), ask questions, give answers, and provide insights to help enhance the overall class experience. We recommend a headset, headphones, or earbuds to eliminate feedback and echo when using your microphone.

If you have any questions regarding the mandatory minimum hardware requirements, please contact liveonline@nw3c.org.

Class Fee: $0
Request Wait List
Register for class
Clear to Register someone else