The OpenText EnCase - Internet based Investigation training course involves practical exercises and challenging real-life case investigations pertaining to Internet-based investigations. Artifacts from popular peer-to-peer and file sharing programs, such as BitTorrent, Ares, and Gigatribe will be retrieved and examined. Emails and the Internet are the cornerstones of consumer and business use. Virtually all examinations ranging from corporate to criminal to cybersecurity investigations will involve the interrogation of email and Internet data. Artifacts from the most widely utilized Internet browsers, including Internet Explorer/Edge, Firefox, and Chrome will be analyzed.
By attending OpenText EnCase - Internet based Investigation workshop, delegates will learn:
- History, operation, and artifacts associated with peer-to-peer file-sharing applications, such as BitTorrent and the Ares Galaxy P2P network
- How the GigaTribe peer-to-peer software allows its users to chat and share files individually and within groups
- Operation of the Microsoft Internet Explorer Web browser with regards to typed URLs, password and form-data storage, cookies, Internet history, and cache content
- How Web pages are constructed and will use this information together with their new-found knowledge of cached Internet Explorer Web content to correctly rebuild Web pages
- History, operation, and artifacts associated with Mozilla Firefox and Google Chrome
- Operation of Web search engines
- Fundamental principles of email operation, how email is sent and received; also how email message data (including attachment data) is encoded and how deleted data may be recovered in certain circumstances
- Microsoft Outlook PST structure
- Attend a training on OpenText EnCase - Building an Investigation or equivalent practical experience
- Law Enforcement Officers, Computer Forensic Examiners, Corporate & Private Investigators & Network Security Personnel.