ICAC-DF101 Basic Digital Forensic Analysis: Windows Acquisition

Delivery Method: Virtual
Location: Online
Duration: 3 Days
Date: 09/18/2023 – 09/20/2023
Time: 9:00 AM – 6:00 PM Eastern

Register Here

This course provides the fundamental knowledge and skills required to acquire forensic backup images of commonly encountered forms of digital evidence (Microsoft® Windows® based computers and external storage devices) in a forensically-sound manner. Presentations and hands-on practical exercises cover topics on storage media and how data is stored, the forensic acquisition process, tool validation, hardware and software write blockers, forensic backup image formats, and multiple forensic acquisition methods. Students will use third party tools, both free and commercial, that are currently used by practitioners in the field.

Key concepts covered in this course include:
• Storage media
• Forensic acquisition process and methods
• Tool validation
• Hardware and software write blockers
• Forensic backup image formats

Closed captioning is always available to students. Live speech-to-text language translations to 100 different languages is also available. Contact support@nw3c.org if you would like this service.

Student Testimonials
“My training with NW3C was instrumental in my promotion to Digital Evidence Examiner. I am confident that I would not have been prepared for the promotional process without the instruction of NW3C.” -Raleigh, North Carolina

“The knowledge I have gained from NW3C courses about digital forensics has been helpful in understanding and comfort level when working on various video capture and storage devices (whether they are DVRs/NVRs or PC-based surveillance systems). This course has made me more comfortable working with PC-based surveillance (CCTV) systems.” – Indianapolis, Indiana

Mandatory 100% Participation
To receive a certificate upon completion of this course, the following must be completed:
• Score of 80% or above on post-test
• Complete all in-class exercises