|
Before enrolling in this computer
forensics training course, please read this document
in its entirety and make sure you are aware of the
prerequisites and additional requirements/conditions.
This computer forensics training is meant for those
without any previous experience with computer forensics.
The student will be introduced to concepts and techniques
that every computer forensics practitioner must master.
What is computer forensics?
The definition we use at CyberSecurity Institute is
as follows: "The preservation, identification,
extraction, interpretation, and documentation of computer
evidence, to include the rules of evidence, legal
processes, integrity of evidence, factual reporting
of the information found, and providing expert opinion
in a court of law or other legal / administrative
proceeding if necessary as to what was found."
Computer forensics does not just deal with criminal
matters or law enforcement. Situations where the skills
of a computer forensics analyst are needed arise everyday
- divorces, civil disputes, bankruptcies, medical
malpractice, wills, the list goes on and on. If you
desire a more expanded definition, please see the
document "What
Is Computer Forensics?"
Who
should take this class?
Anyone in an information technology related
field. New security personnel, IT security officers,
security professionals, security auditors, network
engineers, network administrators, troubleshooters
and technicians. Appropriate for anyone interested
in network security - technical CEOs and law enforcement
as well.
Course topics for this training
will include:
Active, archival and latent data
Basic TCP/IP concepts
Hashes and Checksums
Conducting keyword searches
Creating understandable and accurate reports
Creating forensically sound working copies or images
of media
Common File Header formats
Documentation, chain of custody, and evidence handling
procedures
Assisting with motions (ie, motions to compel production
of a hard drive, logs, etc)
Questions to prepare for/advising your retaining counsel
FAT 12/16/32 file systems
File slack, ram slack, drive slack, and unallocated
space
NTFS File Systems
Compact Disc analysis
Interpretation of various log formats
Interpreting Internet History and HTTP concepts
Manual and automated data recovery
Metadata for Microsoft Office and PDF documents
Overcoming encryption mechanisms and password protection
PC hardware concepts
Privacy issues
Rules of evidence
Windows print spool files
Windows registry
Windows shortcuts
Windows swap file
Working as an expert technical witness
Insurance/liability issues
Viruses and malware
Prerequisites:
Students must have at least one certification or
equivalent work experience in each of the following
three areas:
- Computer and software support
- Computer networking
- Information security
While the following list of accepted prerequisite certifications
should serve as a guideline, we understand the value
of training received in the military, on the job, and
via certificate or degree programs. If you feel you
meet the minimum requirements, discuss the situation
with your instructor. Instructors are authorized to
accept any training or work experience combination that
they feel meets the requirements, but these minimum
requirements must be met.
Example Certifications:
Computer and software support
A+
Computer networking
Network+
iNet+
CIW Foundations
CCNA
MCSA
MCSE
Information security
Security+
CCSP
CISSP
MCSA: Security
SANS GSEC
SCNP
Students must also have intermediate level DOS experience,
and be able to navigate unaided throughout a computer
system with multiple hard drives and partitions from
a command line environment.
Additional Requirements/Conditions:
All students must agree with and sign the CyberSecurity
Institute Code of Ethics and Conduct which will be
presented for signature during the first day of computer
forensics training. You can view the Code of Ethics
and Conduct here.
If you have any problem whatsoever with signing the
Code of Ethics and Conduct, do not enroll for this
course.
Under no circumstances will recording devices be
allowed while attending the computer for ensics
training.
Certification
This course of instruction will prepare you
for the CyberSecurity Forensic Analyst (CSFA)™certification.
More information is available on our certifications
site.
Forensic Tools
You will be exposed to a variety of computer forensic
tools during your computer forensics training. Understand
that we stress methodology and understanding of what
the forensic software tools are doing versus using
any specific tools. A forensic examiner who has a
firm grasp of the basics will be able to use and learn
to use a multitude of tools. Once you successfully
complete our course, you will be able to use whatever
tools you choose and are available to you.
Your Instructor and Host -
Steve Hailey, President and CEO of CyberSecurity Institute
Steve's
Bio
Why Take Our Course?
More organizations every day are "hanging out a
shingle" to offer forensics training. Some have
experienced instructors and some do not. Some
also rely on a single software package for their forensic
work. Our courses emphasize technique and methodology,
regardless of the software package used.
Our goal is to help you become a forensic analyst
that can think independently and deal with any situation
that arises. Forensic examiners that know how to use
a single program and are not aware of what happens
behind the scenes are not true forensic analysts,
but are merely people using software. These people
will not hold up well against skilled forensic examiners
who challenge their results and methodology - cases
can be won or lost due to the skills of the forensic
examiner.
|
Interested In Hosting A Class?
|
| Host a class at
your location and receive two free seats. Email
sales@cybersecurityinstitute.biz. |
| Course
Dates and Locations |
| Location |
Shoreline
Community College @ Lake Forest Park
Classroom #2 |
| Address |
17171 Bothell Way NE, Suite A220 - Lake Forest
Park, WA 98155
Behind Third
Place Books, top floor of the Lake
Forest Park Town Center.
|
| Dates/Times |
August 4 - August 8 2008. 9 AM to 5 PM
|
| Cost |
$2300.00 |
| Seats
Available |
15 |
| Directions |
Directions
1 Directions
2 |
| Hotels |
Hotels |
| To
Enroll |
Enrollment
Form |
Additional
Information |
CLASS SIZE WILL BE LIMITED TO TWENTY STUDENTS.
CLASS IS LOCATED IN LAKE FOREST PARK TOWN
CENTER, CLOSE TO A FOOD COURT. PLENTY OF MEAL
AND DINING CHOICES.
 .
|
| For in-house training,
please contact us for a quote by using sales@cybersecurityinstitute.biz |
|
