This course provides
students with the fundamental knowledge and skills necessary to perform a
limited digital forensic examination, validate hardware and software tools, and
effectively use digital forensic suites and specialized tools. The course begins
with a detailed study of the digital forensic examination process,
including documentation, case management, evidence handling, validation,
and virtualization. Students learn to use today's leading commercial and open
source digital forensic suites: Magnet Axiom, X-ways Forensic, and Autopsy.
Instruction on each suite will include an interface overview, configuration,
hashing, file signature analysis, keyword searching, data carving, bookmarking,
and report creation.
Digital forensic process. Evidence
review; requests for examination; case management.
Validation. Creation of validation
images; validation testing.
Effective tool usage. Tool interface;
hashing; file signature analysis; data carving; searching; metadata;
Reporting. General report structure;
report templates; using tool-generated reports.
This course is
intended for law enforcement personnel with a solid understanding of computers and
common software applications, and experience in handling and acquiring digital
NW3C recommends that students complete the following courses before
registering for Intermediate Digital Forensic Analysis: Automated Forensic
All classes are subject to
cancellation up to 45 days before the start of class if the minimum class
registration threshold is not met.