Computer forensics essential for complete security

Computer forensics is again in the hot-seat, with the recent article by Simon Sharwood appearing in the October 06 edition of MIS - Cyber sleuths on the trail of foul play.

Sharwood explains that computer forensics is essentials for detecting security incidents and proving (in court) that they have occurred.

"In a climate of heightened concern about corporate governance, the legal community is starting to advise business to learn more about forensics so that data retention policies ensure evidence is not destroyed or discarded."

EnCase® Forensic is the industry standard in computer forensic investigation technology and is manufactured by Guidance Software. DDLS provides training for EnCase Forensics, which enables attendees to learn to gather, locate, analyse and explain the results of computer forensics evidence to detect security incidents.

The following three streams of EnCase training are available at DDLS:

EnCase Essentials v5
Designed for investigators new to computer forensics. Topics covered include:

1. What is computer forensics and computer evidence?

2. Overview of the EnCase and computer forensic methodology

3. Determining whether a computer system contains evidence within the scope of your investigation or warrant.

EnCase Intermediate Analysis and Reporting v5
Designed for investigators with strong computer skills, prior computer forensics training and experience using EnCase. Topics covered include:

1. Acquiring and authenticating the most common types of media

2. Recovering NTFS file system artefacts such as swap files, file slack and spooler files

3. Authenticating the Evidence File format using CRC and hash values.

EnCase Advanced Computer Forensics v5
Designed for investigators with advanced computer skills and two or more years experience in computer forensics. Attendees learn advanced data recovery techniques of artefacts in the many file systems supported by EnCase.

 

For additional information on EnCase Computer Forensics training at DDLS, please contact your Account Manager or the DDLS Customer Care Centre on 13 12 01.