AccessData offers a broad array of training options.

Transcription

1 Forensics Training

2 AccessData offers a broad array of training options. Our trainers have more than two centuries of cumulative experience in their respective fields. Take Advantage of the All Access Pass Save money and simplify your budget by purchasing a year s worth of training at one flat rate. The All Access Pass includes: P Classroom courses P Live Online Training P One year access to on-demand training modules Build Your Own All Access Pass: Litigation Support Computer Forensics Mobile Forensics Full Suite For Educational Institutions AccessData Academic provides higher learning institutions around the world with the necessary tools to offer accredited computer forensics, mobile forensics or litigation support training. Designed to provide your students with real-world knowledge of the technology used in their chosen discipline, our program also prepares students to become certified in the use of our software.

3 Training Options Training Options Train in the Classroom Choose a pre-scheduled class in a city near you. Depending on the subject matter, classes vary from one to five days of instruction. View AccessData s online course calendar to see where and when upcoming classes will be held. Live, Online Training (LOT) LOT is instructor-led and interactive to allow you to participate in AccessData s most popular training courses remotely. Two-way communication is available so you can participate in live classroom discussion. This option gives you the training you need while saving time and money by eliminating travel. Learning Management System (LMS) LMS provides on-demand, video-based delivery of nearly all AccessData s training course material. Students are assigned the appropriate module(s) based on a pre-selected learning path that can be customized for your organization. Customers can even be given administrative access for visibility and supervision of employee progress. Customized Curriculums You choose how many days you want the training to last and the topics you would like covered. AccessData will create a program tailored specifically for your organization. Over 6,000 customers are trained by us every year.

4 Computer Forensics The Leading Provider of Computer Forensics Training. About the Software Forensic Toolkit (FTK) is the standard in computer forensics software. It s a court-accepted digital investigations platform that is built for speed, analytics and scalability. SC Magazine said that FTK 4.0 was the first serious advance in computer forensics tools in a long time. With unsurpassed processing speed and accuracy, as well as industry-leading memory/volatile data, Apple OS and analysis to name a few it s clear why FTK has become the top choice for law enforcement, government agencies and corporations worldwide. Are you an ACE? The ACE credential validates your proficiency with Forensic Toolkit technology. AccessData offers courses for the beginner, intermediate and advanced computer forensics examiner. These courses are offered in a variety of delivery methods. BEGINNER Forensic Fundamentals This classroom course provides an introduction to computer forensics. In this five-day program, students will learn the basics of digital forensics; from sources of electronic evidence with search and seizure considerations to how data is stored, operating system vs. file system functions, as well as how to forensically acquire data using a write blocker. INTERMEDIATE AccessData Bootcamp In this three-day class, you re provided with the knowledge and skills necessary to install, configure and effectively use Forensic Toolkit (FTK), FTK Imager, Password Recovery Toolkit (PRTK) and Registry Viewer. AccessData Forensics In this five-day AccessData Technology intensive class, you will learn how to install, configure and effectively use Forensic Toolkit (FTK), FTK Imager, Password Recovery Toolkit (PRTK), and Registry Viewer. In addition, participants will use AccessData products to conduct forensic investigations on Microsoft Windows systems, learning where and how to locate Windows system artifacts.

5 SPECIALIZED Applied Decryption This is an advanced, intensive course that is extremely popular among government agencies, law enforcement and corporate IT teams alike. Over three days, participants learn about current encryption technologies and how to decrypt applications, encrypted containers, private keys and more using PRTK & DNA. Internet Forensics In this popular three-day course, participants will learn where and how to locate Internet artifacts using Forensic Toolkit (FTK), Registry Viewer and Password Recovery Toolkit (PRTK). Windows Forensics Core This three-day course will teach students where Windows system artifacts may be found and how to locate them using AccessData products. Participants will leave this course with the knowledge and skills necessary to thoroughly investigate Microsoft Windows systems. Windows Forensics 7 This advanced class focuses on Microsoft Windows 7 operating systems, training participants in the analysis of Windows 7 artifacts and file system mechanics using AccessData technology. Windows Forensics Vista This advanced class focuses on Microsoft Vista operating systems, training participants in the analysis of Windows Vista artifacts and file system mechanics using AccessData technology. The course is three days. Windows Forensics Registry This valuable three-day program teaches students how to analyze the Microsoft Windows registry to locate critical registry artifacts. AD Triage This is a one-day course, teaching participants how to install, configure, and effectively use the AccessData Triage software tool. AD Triage allows both forensic examiners and non-forensic personnel to acquire either all or specifically targeted hard drive data, live memory, network information and system information from a live or shut-down computer in just minutes. Macintosh Forensics This AccessData training class provides the knowledge and skills necessary to recover and analyze forensic artifacts from the Macintosh operating system using Forensic Toolkit. Participants will learn GPT drive structure and sound methodology for imaging Macintosh hard drives, as well as how to obtain date and time information from Macintosh systems. In addition to working with the Macintosh operating system, participants will recover artifacts from Macintosh-associated programs such as Safari and Firefox browsers, ichat, and Apple Mail. Participants will also learn how to recover artifacts from ipod and iphone devices. Computer Forensics

6 Mobile Forensics Get Product-Neutral Training or Gain Proficiency using Mobile Phone Examiner Plus. About the Software MPE+ is a stand-alone mobile forensics software solution that is available as software only or preconfigured on a touch tablet for use in the field. MPE+-created images integrate with FTK software, allowing you to correlate evidence from multiple mobile devices with evidence from multiple computers within a single interface. MPE+ is the only mobile forensics solution designed to facilitate mobile device discovery for litigation support personnel, as it delivers a graphic timeline and social analysis. MPE+ supports more than 6,800 mobile devices and offers market leading support for a broad array of smart devices. Are you an AME? The AME credential demonstrates your proficiency with MPE+, as well as general methodology knowledge. AccessData mobile forensics training provides both product-neutral offerings as well as courses designed to train you in the use of Mobile Phone Examiner Plus (MPE+). BEGINNER Mobile Device Forensics 101 This three-day classroom course gives you a foundational understanding of the history of mobile device examinations. Learn how to analyze SIM cards, GSM, CDMA and iden Handsets, Global Positioning Systems (GPS), and learn about the software used to examine mobile devices and SIM cards. This course is intended for forensics professionals and law enforcement personnel who must conduct mobile device examinations utilizing multiple tools and a tested forensic process. SPECIALIZED Mobile Phone Examiner Plus MPE+ is available as a three-day intensive classroom course, or a one-day, live, online training (LOT). It introduces students to legal issues and requirements for searching mobile handsets and information on mobile service providers. Receive hands-on instruction in the acquisition and analysis of GSM, CDMA, and iden mobile phones, as well as SIM cards using MPE+. This course will also cover parsing ios, Android, and Blackberry data acquired from the devices and backup files. Students will also learn how to use the product s social and timeline analysis functionality to create a detailed view of the activity that occurred on the mobile device. Finally, students will learn how to create a forensic SIM and its importance in a mobile forensic examination. The three-day intensive class allows the student to have hands on with mobile devices utilizing MPE+, a full day with the MPE+ Mobile Tablet and specialized training in collecting data from Chinese mobile devices.

7 ios Forensic Analysis This three-day course is available in a classroom setting or as live, online training (LOT). It covers the internals of Apple devices, the way the OS is designed and the way these devices store data. Attendees will learn how to find ios dates/times in hex, parse data contained within the ios device manually, discover where the data is stored within the file system, and how to bypass some ios security measures. Android Forensic Anaylsis This three-day course is available in a classroom setting or as live, online training (LOT). It covers the internals of Android devices, the way the OS is designed and the way these devices store data. Attendees will learn how to find Android dates/ times in hex, parse data contained within the Android device manually, discover where the data is stored within the file system, and how to bypass some Android security measures. Android Malware This one-day course is available in a classroom setting or as live, online training (LOT). Android Malware covers topics such as understanding the Android operating system, its vulnerabilities, Android malware types, distribution points, apk files and modification, static versus dynamic analysis, and methods to uncover malware on a mobile device. Tools utilized in the class include but are not limited to the following: MPE+ FTK Imager Android SDK Android Analysis Tools Network Analysis Tools Cellebrite Analysis This three-day course is available in a classroom setting or as live, online training (LOT). Attendees will learn how to extract physical data from various device types, such as ios, Android and Blackberry devices, and learn Python scripting, chains, searching, and more. Students will also learn how to dig deeper, in order to recover the data that was not parsed. Mobile Device Artifacts This three-day course is available in a classroom setting or as live, online training (LOT). It will cover topics, such as data formats, artifact types, and artifact carving. Attendees will learn how to ensure they are performing the most accurate examination and learn how to validate the data recovered. This course will also cover how dates and times are stored within SMS and call logs, the location of handset locks, and other data not extracted with forensic software. This course covers standard mobile phones and not smart devices. Mobile Device Flasher Orientation This three-day classroom course gives you an in-depth understanding of the mobile forensic examination utilizing flasher box hardware tools and software. Topics include flasher box orientation, navigating Flash memory and port monitoring. Mobile Forensics Flasher Orientation builds off the Mobile Forensics 101 Workshop and assumes you have attended an introductory mobile forensics course. Windows Phone Forensic Analysis This one-day online, interactive course covers the internals of Windows mobile devices, the way the OS is designed, and the way these devices store data. This course takes a multipletool approach to mobile phone forensics, using both free and paid applications and teaching the skills needed to find and process data with specialized software. Blackberry Forensic Analysis This one-day, online training module covers BlackBerry hardware, the stored data available for analysis and the backup file. This course reviews the best options for capturing data from BlackBerry devices, and as with all AccessData mobile forensics courses, you will learn how to perform forensic analysis using both automated tools and manual methods, which serve to validate results. SIM Forensic Analysis This one-day advanced course covers the following topics: SIM, USIM and RUIM structure File systems Data translation Forensic SIM card creation Mobile Forensics

8 AccessData offers a near limitless array of training topics and delivery methods. From our affordable and effective All Access Pass to our customizable content offerings we can handle any individual or organizational training need. AccessData trainers have more than two centuries of cumulative experience in their respective fields that equates to practical expertise and background in the classroom, be it virtual, online or on-demand. We encourage you to explore what AccessData Training has to offer in the fields of litigation support and e-discovery, digital forensics and mobile device investigations. If you didn t see what you needed here, reach out to our team anyway. We are constantly evolving our catalog of topics and methods of delivery. CORPORATE HEADQUARTERS West 400 South Suite 350 Lindon, UT USA NORTH AMERICAN SALES Fax: sales@accessdata.com INTERNATIONAL SALES +44 (0) internationalsales@accessdata.com