Computer Forensics Courses

One Day Class

45% OFF For All Military Personnel,

Litigation where information technology is involved in some way is increasing. In many criminal and civil cases there is usually some type of evidence related to the situation that can be discovered and/or recovered from a computer.

ENROLL IN THIS COURSE

Intended Audience
This course is designed for anyone interested in learning more about computer forensics/forensic computing. One does not need to be working in an information technology related field to attend.

Course Overview
Our focus for this one-of -a-kind course will be the various aspects of computer forensics, and what working in this exciting field actually entails. You'll be taken through an actual computer forensics case as seen through the eyes of an expert.

While the course will not make you a computer forensics expert, you will become conversant in computer forensics terminology and will gain an understanding of what computer forensics experts actually do. As many computer forensics cases now involve Internet technologies, we will also be discussing some items that are normally overlooked as well as misinterpreted. You'll also learn how a computer forensics expert prepares themselves to testify.

Topics Covered Will Include
Data Storage and Hard Drive Primer
Sources of Data and Evidence
Computer Forensics Procedures
Computer Forensics Experts
Preparing to Testify



Five day Class

Computer Forensics is one of the fastest growing fields within Information Technology, with a shortage of qualified, competent people.

Before enrolling in this course, please read this document in its entirety and make sure you are aware of the prerequistes and additional requirements/conditions.

ENROLLMENT STARTING SOON

This course in computer forensics is meant for those without any previous experience in the discipline. The student will be introduced to concepts and techniques that every computer forensics practioner must master.

What is computer forensics?
The definition we use at CyberSecurity Institute is as follows: "The preservation, identification, extraction, interpretation, and documentation of computer evidence, to include the rules of evidence, legal processes, integrity of evidence, factual reporting of the information found, and providing expert opinion in a court of law or other legal proceeding if necessary as to what was found."

Computer forensics does not just deal with criminal matters or law enforcement. Situations where the skills of a computer forensics analyst are needed arise everyday - divorces, civil disputes, bankruptcies, medical malpractice, wills, the list goes on and on. If you desire a more expanded definition, please see the document "What Is Computer Forensics?"


Who should take this class?
Anyone in an information technology related field. New security personnel, IT security officers, security professionals, security auditors, network engineers, network administrators, troubleshooters and technicians. Appropriate for anyone interested in network security - technical CEOs and law enforcement as well.

Course topics will include:
Computer crime – present and future
Working as an expert technical witness
Questions to prepare for/advising your retaining counsel
Preserving computer evidence
Safely seizing/obtaining computers
Using hashing algorithms
Identifying file types
File slack, ram slack, drive slack, and unallocated space
Magnetic storage media fundamentals
Disk geometry and related issues
Data hiding methods
Keyword searches
Forensic tools
Imaging floppy disks
Imaging hard disks
Restoring erased files
Proper documentation methods
Creating reports


Prerequisites:

Students must have at least one certification or equivalent work experience in each of the following two areas:

Computer and software support

Computer networking

While the following list of accepted prerequisite certifications should serve as a guideline, we understand the value of training received in the military, on the job, and via certificate or degree programs. If you feel you meet the minimum requirements, discuss the situation with your instructor. Instructors are authorized to accept any training or work experience combination that they feel meets the requirements, but these minimum requirements must be met.

Accepted Certifications:

Computer and software support
A+

Computer networking
Network+
iNet+
CIW Foundations
CCNA
MCSA
MCSE


Students must also have intermediate to expert DOS experience, and be able to navigate unaided throughout a computer system with multiple hard drives and partitions from a command line environment. We recommend that you test your knowledge by taking our DOS Quiz.

Additional Requirements/Conditions:
All students must agree with and sign the CyberSecurity Institute Code of Ethics and Conduct which will be presented for signature during the first day of class. You can view the Code of Ethics and Conduct here. If you have any problem whatsoever with signing the Code of Ethics and Conduct, do not enroll for this course.

Under no circumstances will recording devices be allowed in the classroom.

Certification
The CyberSecurity Forensic Analyst (CSFA)™certification will become available in May 2004. This five day course will help prepare you for the certification. The certification test will be hands on, with each candidate having a maximum of 8 hours to complete.

Forensic Tools
You will be exposed to a variety of forensic tools in this course, including Datalifter, MaresWare, Drivespy, and the Norton Utilities. Understand that we stress methodology and understanding of what the forensic software tools are doing versus using any specific tools. A forensic examiner who has a firm grasp of the basics will be able to use and learn to use a multitude of tools. Once you successfully complete our course, you will be able to use whatever tools you choose and are available to you.