This course provides the fundamental knowledge
and skills required to preview and acquire images in a forensically sound manner
of the most commonly encountered forms of digital evidence (Microsoft Windows
and Apple macOS-based computers, external storage devices, and Android and
iOS-based mobile devices). Presentations and hands-on practical exercises
cover topics on storage media and how data is stored, firmware interfaces (BIOS,
UEFI), the previewing process, live and dead-box previewing, the forensic
acquisition process, tool validation, hardware and software write blockers,
forensic image formats, and multiple forensic acquisition methods.
Students will use third party tools, both free and commercial, that are
currently used by practitioners in the field.
This course is
intended for law enforcement personnel with a solid understanding of
computers and common software applications.
NW3C recommends that students complete the following courses before
registering for Basic Digital Forensic Analysis.
All classes are subject to cancellation
up to 45 days before the start of class if the minimum class registration
threshold is not met.