The OpenText EnCase Digital Forensics training course provides you with an understanding of how EnCase may be used to examine data related to an incident response, an employee misconduct investigation, and/or a law enforcement criminal and/or civil investigation. You will create cases using EnCase, configure the application to maximize its utilization, and learn evidence acquisition concepts and how to validate the data collected. Instruction progresses to the analysis of the data whether related to criminal investigations, cybersecurity incidents, or other matters. The course will cover techniques, such as keyword or indexed searching along with hash analysis. You will learn how to bookmark, export, and create reports relating to examination findings. The course concludes with instruction on archiving, validating the data, and restoring the case.
By attending OpenText EnCase Digital Forensics workshop, delegates will learn:
- The EnCase digital forensic methodology
- How to navigate the EnCase interface
- How to extract data and files from your evidence
- How to bookmark evidence files, file sets, and data structures
- How to conduct raw and index searches
- How to analyze file signatures and view files
- How to conduct hash and entropy analyses and import hash sets
- How to import and export data to and from Project VIC
- How to install external file viewers to EnCase
- How to prepare reports, using templates provided with EnCase
- How to create a report template
- How to restore evidence
- How to archive files and data created through the analysis process
- The proper techniques for handling and preserving evidence
- Knowledge of basic computer forensics will be helpful
- Digital Forensic Investigators, including Law Enforcement, Government, Military, Corporate, IT Security & Litigation Support Professionals.