We offer a 1-Day hands-on, instructor-led training for Triage-Investigator® (TINV). Trainees will learn how to configure Triage-Investigator®, operate the software and interpret results.
Course Outline
Introductions & Getting Started
- Digital Forensic Triage Basics
- Overview of How to Use Triage-Investigator®
- Triage-Investigator® Terminology – Artifact Captures
- Triage-Investigator® Terminology – File Captures
- Triage-Investigator® Search Profiles – Quick, Intermediate, and Comprehensive
- Triage-Investigator® Workflow
Setup & Installation
- Triage-Investigator® software installation and the Windows Assessment and Deployment Kit (WADK)
Booting and BIOS
- Accessing BIOS/UEFI Setup
- Accessing Boot Menu
- UEFI and Fastboot Issues
- Booting Apple Macintosh computers
Capture: Conducting a Scan
- Case Study: Scanning attached media
- Case Study: Scanning drive images
- Case Study: Carrying out a boot scan
- Case Study: Carrying out a live scan
Analysis: Navigating Triage Investigator
- Navigating Capture Results
- Understanding Picture, Video, Keyword, Files and Timeline Views
- Column Settings
- Filtering Captures and Picture, Video, Keyword, Files and Timeline Views
- Tagging
- Commenting
Reporting
- Case Study: Creating appropriate reports
- Reporting – HTML
- Reporting – CSV
- Reporting – Stand-alone viewer
Imaging
- Device Imaging
Advanced Issues
- Importing Search Profiles
- Implications of thorough file identification and searching within containers
- File type creation and implications
- Searching browser cache issues
- Case Study: Knowledge check
Get in touch with us today to discuss your digital forensic triage training needs, learn more, or set up a private training for your investigators or examiners.
