This 4-days course include:

This course is focused on the systematic and efficient examination of computer media using our integrated computer forensics software “X-Ways Forensics”.

Complete and systematic coverage of all computer forensics features in WinHex and X-Ways Forensics. Hands-on exercises, simulating most aspects of the complete computer forensics process. Attendees are encouraged to immediately try newly gained insights as provided by the instructor, with sample image files. Many topics are explained along with their theoretical background (slack: beyond the usual, how hash databases are internally structured, how deleted partitions are found automatically, with what methods X-Ways Forensics finds deleted files). Other topics are forensically sound disk imaging and cloning, data recovery, search functions, dynamic filtering, report creation, … Emphasis can be put on any aspect suggested by the participants. You will receive reference training material for later repetition. Prerequisite: basic knowledge of computer forensics.

The students will learn e.g. how to get the most thorough overview conceivable of existing and deleted files on computer media, how to scan for child pornography in the most efficient way, or how to manually recover deleted files compressed by NTFS which would not even be found by conventional file carving techniques.

* Vouchers can only be used for courses delivered by CDFS at our training facility or via Virtual Instructor-Led Training.

*CHANGES TO COURSE CONTENT AND PROVIDED SOFTWARE CAN BE MADE WITHOUT PRIOR NOTICE.

CDFS reserves the right to cancel this class due to either insufficient enrolment and/or unforeseen difficulties arising from the delivery.