EnCaseŽ v6 Advanced Internet Examinations



			Go to EnCase Computer Forensic courses.

[Email] [Print] [Save]

EnCaseŽ v6 Advanced Internet Examinations

Vendor Course Code:

Course Length:

4 days

Course Price:

$3,600.00 + GST

Availability:

If your preferred city or time is not currently listed, please call DDLS on 13 12 01 and we can try to accommodate your needs.

Overview:

This hands-on course involves practical exercises and real-life simulations. The class focuses on the forensic evidence located on the computer belonging to the suspect and /or victim - not online or cyber investigations. E-mails and the Internet are cornerstones of consumer and business computer use. Virtually all computer forensic examinations will involve analysis of e-mail and Internet artifacts, underscoring the need to understand the relevance of Internet and e-mail-based evidence recovered during examinations.

Skills Gained:

The course will enable attendees to recover and examine e-mail messages, headers and attachments from widely used e-mail applications (OutlookŽ, America OnlineŽ, and NetscapeŽ) and web-based e-mail providers. Attendees will also locate and examine artifacts from search engines, instant messaging clients and newsgroups.

Attendees will learn how to interpret Internet browser history, search engines, logs and correctly rebuild web pages.

Key Topics:

This course provides in-depth coverage on artifacts involving:

Peer-to-peer clients

Instant Messaging Clients

Trojan viruses

System Monitors/keyloggers

JavaScript exploits

Popular web browsers, such as Internet Explorer, Netscape, and Mozilla

Target Audience:

This course is intended for law enforcement officers, computer forensic examiners, corporate and private investigators and network security personnel. A basic understanding of the concepts of computer forensics is required. The class curriculum builds upon the foundation of the EnCase Computer Forensics II course, with a focus on e-mail and Internet artifacts.

Prerequisites:

EnCase Computer Forensics II or EnCE Certification. Advance preparation for this course is not required.