DF101 Basic Digital Forensic Analysis: Windows Acquisition

Register Here

Delivery Method: In-Person
Location: 3401 Edwin St
Savannah, GA 31405  Map
Duration: 3 Days
Date: 10/17/2023 – 10/19/2023
Time: 8:00 AM – 4:00 PM Eastern

This course provides the fundamental knowledge and skills required to acquire forensic backup images of commonly encountered forms of digital evidence (Microsoft® Windows® based computers and external storage devices) in a forensically-sound manner. Presentations and hands-on practical exercises cover topics on storage media and how data is stored, the forensic acquisition process, tool validation, hardware and software write blockers, forensic backup image formats, and multiple forensic acquisition methods. Students will use third party tools, both free and commercial, that are currently used by practitioners in the field.

Key concepts covered in this course include:
• Storage media
• Forensic acquisition process and methods
• Tool validation
• Hardware and software write blockers
• Forensic backup image formats

Closed captioning is always available to students. Live speech-to-text language translations to 100 different languages is also available. Contact support@nw3c.org if you would like this service.

Student Testimonials
“My training with NW3C was instrumental in my promotion to Digital Evidence Examiner. I am confident that I would not have been prepared for the promotional process without the instruction of NW3C.” -Raleigh, North Carolina

“The knowledge I have gained from NW3C courses about digital forensics has been helpful in understanding and comfort level when working on various video capture and storage devices (whether they are DVRs/NVRs or PC-based surveillance systems). This course has made me more comfortable working with PC-based surveillance (CCTV) systems.” – Indianapolis, Indiana

Mandatory 100% Participation
To receive a certificate upon completion of this course, the following must be completed:
• Score of 80% or above on post-test
• Complete all in-class exercises

Cancellation
NW3C may cancel any class for any reason and without notice. NW3C is not responsible for non-refundable travel accommodations lost or rendered moot as a result of a class cancellation.