Advanced Computer Forensics

SEC-403

InfoSec Institute's Advanced Computer Forensics Training course is the most hands on and highly technical computer forensics training course available anywhere!

Advanced Computer Forensics Course Overview

COURSE LENGTH:
4-DAY


Computer criminals are becoming increasingly crafty. Many perpetrators of computer crime are savvy enough to write over files instead of deleting them, clear slack space, and even damage the logic controllers on hard disks containing evidence!

Evidence that you previously may have determined was "unrecoverable" can now be recovered after attending InfoSec Institute's Advanced Computer Forensics training course. Acquiring hard to recover evidence is not enough though, in order for evidence to be of use to yourself, the computer forensics investigator, it must be properly analyzed and interpreted.

Much of the Advanced Computer Forensics course covers hard core, in-depth analysis of recovered data. Such topics as advanced Windows Registry Snapshotting & Recovery, reading SMART data from a damaged hard drive, and advanced file system forensics are covered in great depth.

The goal of InfoSec Institute's Advanced Computer Forensics training course is to train you on advanced forensic recovery techniques as well as advanced data analysis strategies not available elsewhere.

With InfoSec Institute's Advanced Computer Forensics training, you will gain the skills to propel yourself to being one of the top computer forensics investigators on the market today.

AccessData Forensic ToolKit (FTK) Can be included:
Ask about our training packages that include a fully licensed copy of AccessData's Forensic ToolKit, which sells for $1095.

This is in addition to our Computer Forensics Enterprise Suite software package.

This promotion available for most classes and groups, call 866-471-0059 to see if you qualify.

  • 4 Days of in-depth labs and exercises
  • Over $1500 in tools & software(details)
  • Computer Forensics Enterprise Suite
"Jeremy is a genius. I'm glad he is on our side. I would take another course with InfoSec in a heartbeat."

Jason P.

CACI

What You'll LEARN and DO

This Computer Forensics training neatly meshes the skills required in order to respond to security incidents:

  • Firmware issues
  • Recovering evidence from Print & Spool files
  • Recovering OLE Metadata
  • Understanding Recycle Bin INFO2 file format structure
  • Recovering data from INFO2
  • Windows Registry fundamentals
  • Determining time bias via SYSTEM
  • Understanding and recovering Windows Restore Points
  • Recovering Orphan folders
  • Internet Explorer Forensics
  • Internet Explorer "Auto complete" recovery
  • Browser Toolbar Forensics
  • Reversing the Google Toolbar
  • AOL Instant Messenger Forensics
  • Yahoo and MSN Messenger Forensics
  • Volume Analysis
  • RAID Volume Recovery
  • MFT Entry Attribute Concepts
  • FAT32 FSINFO forensics
  • $MFT, $MFTMirr, $BOOT and $Volume file format analysis
  • Understanding $BadClus
  • Recovering "fixup" values
  • Expert Witness Testimony

Dates & Locations




Unfortuantely, no public enrollment courses currently match your criteria

Your name can be added to a wait list for an upcomming course, or we can schedule to run an On-Site course in your local area if you have 6 students or more. Complete the following form if you would like to recieve information concerning our wait list policy and/or On-Site training

Full Name:
Company:
Work Phone #:
Email:
Any questions we can answer?
(optional)
 

The best in the world come train with us



See what our students are saying

  • David S.

    Senior Consultant

    "knowledgable and passionate instructor"

    "I was impressed. The instructor was very knowledgeable about all the material and the industry. He is obviously passionate about forensics and security which helps students to get excited about the material as well."


    Find out more
  • Mari  T.

    Loehrs and Associates

    "real-world knowledge was just as valuable"

    "The forensics training was excellent. The material was excellent and the instructor's real-world knowledge was just as valuable as the course material. He was very personable and engaged the students."


    Find out more
  • Sam C.

    SAIC

    "Over and above what was expected"

    "Over and above what was expected. I am sure his goal was that everyone in the class passed the written portion of the test, and he gave everyone the best advice to pass the exam. And I passed!"


    Find out more
  • Jason P.

    CACI

    "Genius."

    "Jeremy is a genius. I'm glad he is on our side. I would take another course with InfoSec in a heartbeat."


    Find out more

Pricing

Call (866)-471-0059 or fill out this short form for current pricing

YOU ALSO GET

  • 4 Days of Expert Security Training Instruction (from a computer forensics instructor with real-world computer forensics training experience and deep knowledge of course content.)
  • Guaranteed small class size, you get an intimate learning setting not offered at any of our computer forensics competitors.
  • Boot camp style training --- our instructors teach from 8am to 10:30pm every day. Course runs from 8am to 5pm daily with optional computer forensics training exercises to10:30pm.
  • All meals, snacks and refreshments included.
  • Lecture, Lab Exercise and Text book
  • InfoSec's Custom Advanced Computer Forensics Enterprise Suite, includes every program covered in the course for at home study.
  • AccessData Forensic ToolKit (FTK) can be Included - ask your account representative for details

Other Related Tools & Resources For Our Students

Be sure to check out our R&D site. We post tutorials, labs, white papers and articles to help you in your continued education. There are frequently forensics videos available. If you haven't taken a course with us yet, check out some of the types of thigns you'll be doing and learning about in class.

  • Incident Response and Computer Forensics on Rootkits
  • 07/26/2011

    Lets pick up where we left off with the rootkit and post-exploitation video (http://www.youtube.com/watch?v=izv1b-BTQFw). Except, we are now doing incident response. First you’ll see some normal live forensics on the victim and come up with nothing. Then we show how using network forensics techniques (looking at the victim from the outside) we start to see

  • Flesh Tone Analysis – Intermediate Computer Forensics
  • 05/01/2011

    This analysis comes in handy in computer forensics cases such as porn or child pornography investigations. This video shows how to search through hundreds of thousands of images on a hard drive and find only those with human flesh tones in them. We also look at Slack/Free Space and OLE Objects This is just one

  • Computer Forensics: Alternate Data Streams
  • 04/12/2011

    Alternate Data Streams are a way to store data on a machine that is not readily accessible to users. Using ADS, files are not easily accessible by Windows operating system and they do not show up in any file directory. Windows generates it’s own ADS files and most P2P software typically utilize ADS. In this

  • Computer Forensics: Snort Logs Analysis
  • 04/07/2011

    Sometimes the best evidence of a network intrusion resides in network or traffic logs. Snort is a well known open-source traffic analysis and network intrusion detection tool. However, using the logs from Snort we can also see how the intrusion happened, rather than just that an intrusion happened. We’ll use Snort to show how we can

OUR STUDENTS SAY:
InfoSec Institute has an excellent instructor and this is the best IT security class I have ever taken. His knowledge and method of teaching are unsurpassed.