This training is intended for LAW
ENFORCEMENT personnel: those who are directly attached to or work in support of
a law enforcement agency. Please register using your agency-issued
This course provides students with the
fundamental knowledge and skills necessary to perform a limited digital forensic
examination, validate hardware and software tools, and effectively use digital
forensic suites and specialized tools. The course begins with a detailed study
of the digital forensic examination process, including documentation, case
management, evidence handling, validation, and virtualization. Students learn to
use today's leading commercial and open source digital forensic suites: Magnet
Axiom, X-ways Forensic, and Autopsy. Instruction on each suite will include an
interface overview, configuration, hashing, file signature analysis, keyword
searching, data carving, bookmarking, and report creation.
Digital forensic process. Evidence
review; requests for examination; case management.
Validation. Creation of validation
images; validation testing.
Effective tool usage. Tool interface;
hashing; file signature analysis; data carving; searching; metadata;
Reporting. General report structure;
report templates; using tool-generated reports.
This course is intended
for law enforcement personnel with a solid understanding of computers
and common software applications, and experience in handling and acquiring
NW3C recommends that students complete the following courses before
registering for Intermediate Digital Forensic Analysis: Automated Forensic
All classes are subject to
cancellation up to 45 days before the start of class if the minimum class
registration threshold is not met.