Available Online

This course is also available online with self-paced learning via our learning management system. Start today to earn your DEI Certified User Certificate today. The online self paced learning can be completed in about 16 hours.

---

Course Outline

Introductions & Getting Started

• Digital Forensic Evidence and Triage Basics
• Overview of How to Use Digital Evidence Investigator® (also knows as DEI)
  • DEI Terminology – Artifact Captures
  • DEI Terminology – File Captures
  • DEI Search Profiles – Quick, Intermediate and Comprehensive
  • Digital Evidence Investigator Workflow

Setup & Installation

• Digital Evidence Investigator Software Installation and the Windows Assessment and Deployment Kit (WADK)

Booting & Bios 

• Accessing BIOS/UEFI Setup
• Accessing Boot Menu
• UEFI and Fastboot Issues
• Booting Apple Macintosh computers

Capture: Conducting a Scan

• Case Study: Scanning attached media
• Case Study: Scanning drive images
• Case Study: Carrying out a boot scan
• Case Study: Carrying out a live scan

Analysis: Navigating DEI 

• Navigating Capture Results
• Understanding Picture, Video, Keyword, Files and Timeline Views
• Column Settings
• Filtering Captures and Picture, Video, Keyword, Files and Timeline views
• Tagging
• Commenting

Reporting 

• Case Study: Creating appropriate reports
• Reporting – HTML
• Reporting – CSV
• Reporting – Stand-alone viewer

Customizing with Keywords and Hash Values

• Case Study: Creating hash captures and leveraging targeted folders
• Case Study: Creating keyword and regular expression searches
• Case Study: Creating appropriate search profiles
• Case Study: Importing keyword and hash lists
• Case Study: Identifying good and bad keywords

Imaging

• Device Imaging

Advanced Issues

• Implications of thorough file identification and searching within containers
• File type creation and implications
• Searching browser cache issues
• Case Study: Knowledge check

Get in touch with us today to discuss your training needs, learn more, or set up a private training for your investigators or examiners.