Nuix Workstation® Forensic Practitioner Foundations
In the Nuix Workstation Forensic Practitioner Foundations two-day certification course, you will learn how to take advantage of the various tools and filters Nuix Workstation provides to investigate and deep dive each artifact. By learning these forensic techniques, you will understand how to eliminate irrelevant information and focus on critical evidence. This course is ideal for those responsible for digital investigations in both law enforcement and/or corporate environments. During the Nuix Workstation Forensic Practitioner Foundations course, you will learn to:
- Successfully install and configure Nuix Workstation
- Review the basic operations of Nuix Imager
- Use Nuix Workstation to create an Investigations case and determine advanced forensic techniques for processing and analysis
- Outline the various analysis options when working with Windows artifacts
- Visualize data using Context
MODULE 1: REVIEW NUIX WORKSTATION CASES & DATA PROCESSING
- Class Introductions
- Class Objectives
- Review Forensic Baseline Nuix Workstation Case Types
- Adding Case Evidence Processing Profiles Processing Statistics
- Troubleshooting
MODULE 2: SEARCHING ARTIFACTS IN EVIDENCE
- Framing Forensic Searches Search Options
- Query Types
- Search Operators
- Filters
- Field Searches
- Save Search
- Search & Tag
- Advanced Search
- Word Lists
- Digest Lists
- Near Duplicates
- Shingle Lists
- Cluster Runs
- Searching Specific MIME Types Registry/Database Viewer Search Macros
- Pivot
- Charts View
MODULE 3: NAMED ENTITIES
- Named Entities Overview RegEx
- Named Entity Processing Settings
- View Named Entities
- Search Named Entities
- Create Custom Named Entities Create Custom Named Entity Profiles
MODULE 4: WINDOWS ARTIFACTS
- Windows Recycle Bin Unallocated Space Carving
- Web Artifacts
MODULE 5: ADVANCED FORENSICS AND MOBILE PHONES
- Mobile Phone Analysis
MODULE 6: REPORTING & EXPORTING
- Reporting Basics Export Types
Students will be enrolled in the Nuix Workstation Forensic Practitioner Core exam. Passing of the Nuix Workstation Forensic Practitioner Core exam is a requisite for the Nuix Forensic Practitioner Master Certification.
