This course introduces investigators and digital forensics professionals in law enforcement to the file systems utilized by Microsoft Windows®. The course provides knowledge and skills that will assist students in many facets of their examination of digital evidence located in FAT32, exFAT, and NTFS formatted media. The concepts covered for each of the file systems will include a detailed look into the structure of the file systems and a look into the process that occurs when files or folders are saved, deleted, and restored. Detailed hands-on exercises will give students the knowledge and skills to articulate key findings to investigators, prosecutors, judges, and juries.

Key concepts covered in this course include:

• Computer communication and formatting
• File system structure and layout
• Saving files
• Deleting files
• Restoring files

This course is intended for law enforcement personnel with experience with acquisition and examination of digital evidence.

• Introduction to Previewing (online course)
• Encryption (online course)
• Basic Digital Forensic Analysis: Seizure (classroom or live online course)
• Basic Digital Forensic Analysis: Windows Acquisition (classroom or live online course)

This training will be delivered by highly qualified instructors in the field of Computer Forensics.

Duration (Days): 3

Please register your interest for the courses & we will inform you of the next intake.

We will update as soon as the course schedule is confirmed.

Meanwhile, please Register your interest to receive the most updated news:

• NW3C Courses
• Magnet Courses

Regarding Tuition Fees, please contact us to find out more.