{"product_id":"computer-forensics-boot-camp-training","title":"Computer Forensics Boot Camp Training","description":"\u003cdiv\u003e\n\u003cp\u003eLearn how to investigate cybercrime! This boot camp goes in-depth into the tools, techniques and processes used by forensics examiners to find and extract evidence from computers.\u003c\/p\u003e\n\u003cp\u003eInfosec’s Computer Forensics Boot Camp teaches you how to identify, preserve, extract, analyze, and report forensic evidence on computers. You will learn about the challenges of computer forensics, walk through the process of analysis and examination of operating systems, and gain a deep understanding of differences in evidence locations and examination techniques on Windows and Linux computers.\u003c\/p\u003e\n\u003cp\u003eMore than 30 hands-on labs simulating a real cybercrime investigation provide you with practical experience using commercial and open- source forensic tools. The boot camp also prepares you to become a Certified Computer Forensics Examiner (CCFE).\u003c\/p\u003e\n\u003cp\u003e\u003c\/p\u003e\n\u003cp\u003eStudents must have no criminal record. Basic computer skills, including the ability or desire to work outside the Windows GUI interface, are necessary. A+ certification and\/or similar training and experience is not required, but recommended.\u003c\/p\u003e\n\u003cp\u003eThis is a very in-depth training course and is not intended for individuals who have limited or no computer skills.\u003c\/p\u003e\n\u003cp\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eLaw enforcement professionals looking to expand into computer crime investigations\u003c\/li\u003e\n\u003cli\u003eLegal professionals\u003c\/li\u003e\n\u003cli\u003eIT and information security professionals being tasked with corporate forensics and incident handling\u003c\/li\u003e\n\u003cli\u003eAnyone with a desire to learn about computer forensics and develop their skills\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch3\u003eComputer Forensics Boot Camp Training Benefits\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eIn this course, you will:\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eUnderstand the provisions of IT law.\u003c\/li\u003e\n\u003cli\u003eUnderstand complex technical forensics concepts.\u003c\/li\u003e\n\u003cli\u003eHow to apply forensics concepts to forensic investigations.\u003c\/li\u003e\n\u003cli\u003eHandle evidence (procedures and rules).\u003c\/li\u003e\n\u003cli\u003eUse a range of computer forensics toolsAcquire forensic evidence.\u003c\/li\u003e\n\u003cli\u003eLocate forensic artifacts in various operating systems.\u003c\/li\u003e\n\u003cli\u003eAnalyze extracted evidence and properly report findings.\u003c\/li\u003e\n\u003cli\u003eTrack an offender on the internetWork with law enforcement.\u003c\/li\u003e\n\u003cli\u003eDesign an incident response strategy.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003ePrerequisites\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eStudents must have no criminal record. Basic computer skills, including the ability or desire to work outside the Windows GUI interface, are necessary. A+ certification and\/or similar training and experience is not required but recommended.\u003c\/p\u003e\n\u003cp\u003eThis is a very in-depth training course and is not intended for individuals who have limited or no computer skills.\u003c\/p\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\u003ch3\u003eComputer Forensics Training Course Outline\u003c\/h3\u003e\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDay 1\u003c\/h4\u003e\n\u003cstrong\u003eCourse introduction\u003c\/strong\u003e\u003cul\u003e\n\u003cli\u003eComputer forensics and investigation as a profession\u003c\/li\u003e\n\u003cli\u003eDefine computer forensics\u003c\/li\u003e\n\u003cli\u003eDescribe how to prepare for computer investigations and explain the difference between law enforcement agency and corporate investigations\u003c\/li\u003e\n\u003cli\u003eExplain the importance of maintaining professional conduct\u003c\/li\u003e\n\u003cli\u003eDigital evidence — legal issues\u003c\/li\u003e\n\u003cli\u003eIdentifying digital evidence\u003c\/li\u003e\n\u003cli\u003eEvidence admissibility\u003cul\u003e\n\u003cli\u003eFederal rules of evidence\u003c\/li\u003e\n\u003cli\u003eDaubert standard\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eDiscovery\u003c\/li\u003e\n\u003cli\u003eWarrants\u003cul\u003e\n\u003cli\u003eWhat is seizure?\u003c\/li\u003e\n\u003cli\u003eConsent issues\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eExpert witness\u003c\/li\u003e\n\u003cli\u003eRoles and responsibilities\u003c\/li\u003e\n\u003cli\u003eEthics\u003c\/li\u003e\n\u003cli\u003e(ISC)²\u003cul\u003e\n\u003cli\u003eAAFS\u003c\/li\u003e\n\u003cli\u003eISO\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cstrong\u003eInvestigations\u003c\/strong\u003e\u003cul\u003e\n\u003cli\u003eInvestigative process\u003c\/li\u003e\n\u003cli\u003eChain of custody\u003c\/li\u003e\n\u003cli\u003eIncident response\u003c\/li\u003e\n\u003cli\u003eE-discovery\u003c\/li\u003e\n\u003cli\u003eCriminal vs. civil vs. administrative investigations\u003c\/li\u003e\n\u003cli\u003eIntellectual property\u003cul\u003e\u003cli\u003eMarkman hearing\u003c\/li\u003e\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eReporting\u003c\/li\u003e\n\u003cli\u003eQuality control\u003cul\u003e\n\u003cli\u003eLab and tool\u003c\/li\u003e\n\u003cli\u003eInvestigator\u003c\/li\u003e\n\u003cli\u003eExamination\u003c\/li\u003e\n\u003cli\u003eStandards\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eEvidence management\u003cul\u003e\n\u003cli\u003eSOPS\u003c\/li\u003e\n\u003cli\u003eCollection\u003c\/li\u003e\n\u003cli\u003eDocumentation\u003c\/li\u003e\n\u003cli\u003ePreservation\u003c\/li\u003e\n\u003cli\u003eTransport\/tracking\u003c\/li\u003e\n\u003cli\u003eStorage\/access control\u003c\/li\u003e\n\u003cli\u003eDisposition\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eCurrent computer forensics tools and hardware\u003cul\u003e\n\u003cli\u003eCommercial\u003c\/li\u003e\n\u003cli\u003eFree\/open source\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDay 2\u003c\/h4\u003e\n\u003cstrong\u003eForensic science fundamentals\u003c\/strong\u003e\u003cul\u003e\n\u003cli\u003ePrinciples and methods\u003cul\u003e\n\u003cli\u003eLocard’s Principle\u003c\/li\u003e\n\u003cli\u003eInman-Rudin Paradigm\u003c\/li\u003e\n\u003cli\u003eScientific method\u003c\/li\u003e\n\u003cli\u003ePeer review\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eForensic analysis process\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cstrong\u003eHardware\u003c\/strong\u003e\u003cul\u003e\n\u003cli\u003eStorage media\u003cul\u003e\n\u003cli\u003eHard disk geometry\u003c\/li\u003e\n\u003cli\u003eSolid state drives\u003c\/li\u003e\n\u003cli\u003eRAIDS\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eOperating system\u003cul\u003e\n\u003cli\u003eBoot process\u003c\/li\u003e\n\u003cli\u003eBIOS\/CMOS\u003c\/li\u003e\n\u003cli\u003eThe Swap File\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cstrong\u003eFile systems\u003c\/strong\u003e\u003cul\u003e\n\u003cli\u003eFile systems\u003cul\u003e\n\u003cli\u003eNTFS file system\u003c\/li\u003e\n\u003cli\u003eFAT file system\u003c\/li\u003e\n\u003cli\u003eHFS+\u003c\/li\u003e\n\u003cli\u003eExt2\/3\/4\u003c\/li\u003e\n\u003cli\u003eEmbedded\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eErased vs. deleted\u003c\/li\u003e\n\u003cli\u003eLive forensics\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDay 3\u003c\/h4\u003e\n\u003cstrong\u003eFile and operating system forensics\u003c\/strong\u003e\u003cul\u003e\n\u003cli\u003eKeyword searching\u003c\/li\u003e\n\u003cli\u003eMetadata\u003c\/li\u003e\n\u003cli\u003eTimeline analysis\u003c\/li\u003e\n\u003cli\u003eHash analysis\u003c\/li\u003e\n\u003cli\u003eFile signatures\u003cul\u003e\u003cli\u003eFile filtering (KFF)\u003c\/li\u003e\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eVolume Shadow Copies\u003c\/li\u003e\n\u003cli\u003eTime zone issues\u003c\/li\u003e\n\u003cli\u003eLink files\u003c\/li\u003e\n\u003cli\u003ePrint spool\u003c\/li\u003e\n\u003cli\u003eDeleted files\u003cul\u003e\u003cli\u003eRecycle bin forensics\u003c\/li\u003e\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eFile slack\u003c\/li\u003e\n\u003cli\u003eDamaged media\u003cul\u003e\n\u003cli\u003ePhysical damage\u003c\/li\u003e\n\u003cli\u003eLogical damage\u003c\/li\u003e\n\u003cli\u003eFile carving\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eRegistry forensics\u003cul\u003e\n\u003cli\u003eUSB devices\u003c\/li\u003e\n\u003cli\u003eHKLM\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eMultimedia files\u003cul\u003e\u003cli\u003eEXIF data\u003c\/li\u003e\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eCompound files\u003cul\u003e\n\u003cli\u003eCompression\u003c\/li\u003e\n\u003cli\u003eOle\u003c\/li\u003e\n\u003cli\u003eAD\u003c\/li\u003e\n\u003cli\u003ePasswords\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cstrong\u003eWeb and application forensics\u003c\/strong\u003e\u003cul\u003e\n\u003cli\u003eCommon web attack vectors\u003cul\u003e\n\u003cli\u003eSQL injection\u003c\/li\u003e\n\u003cli\u003eCross-site scripting\u003c\/li\u003e\n\u003cli\u003eCookies\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eBrowser artifacts\u003c\/li\u003e\n\u003cli\u003eEmail investigations\u003cul\u003e\n\u003cli\u003eEmail headers\u003c\/li\u003e\n\u003cli\u003eEmail files\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eMessaging forensics\u003c\/li\u003e\n\u003cli\u003eDatabase forensics\u003c\/li\u003e\n\u003cli\u003eSoftware forensics\u003cul\u003e\u003cli\u003eTraces and application debris\u003c\/li\u003e\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eSoftware analysis (hashes, code comparison techniques, etc.)\u003c\/li\u003e\n\u003cli\u003eMalware analysis\u003c\/li\u003e\n\u003cli\u003eMalware types and behaviors\u003c\/li\u003e\n\u003cli\u003eStatic vs. dynamic analysis\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDay 4\u003c\/h4\u003e\n\u003cstrong\u003eNetwork forensics\u003c\/strong\u003e\u003cul\u003e\n\u003cli\u003eTCP\/IP\u003cul\u003e\n\u003cli\u003eIP addressing\u003c\/li\u003e\n\u003cli\u003eProxies\u003c\/li\u003e\n\u003cli\u003ePorts and services\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eTypes of attacks\u003c\/li\u003e\n\u003cli\u003eWired vs. wireless\u003c\/li\u003e\n\u003cli\u003eNetwork devices forensics\u003cul\u003e\n\u003cli\u003eRouters\u003c\/li\u003e\n\u003cli\u003eFirewalls\u003c\/li\u003e\n\u003cli\u003eExamining logs\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cstrong\u003ePacket analysis\u003c\/strong\u003e\u003cul\u003e\n\u003cli\u003eOS utilities\u003cul\u003e\n\u003cli\u003eNetstat\u003c\/li\u003e\n\u003cli\u003eNet sessions\u003c\/li\u003e\n\u003cli\u003eOpenfles\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eNetwork monitoring tools\u003cul\u003e\n\u003cli\u003eSNORT\u003c\/li\u003e\n\u003cli\u003eWireshark\u003c\/li\u003e\n\u003cli\u003eNetworkMiner\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cstrong\u003eAnti-forensics\u003c\/strong\u003e\u003cul\u003e\n\u003cli\u003eHiding\u003c\/li\u003e\n\u003cli\u003eEncryption\u003cul\u003e\n\u003cli\u003eSymmetric\u003c\/li\u003e\n\u003cli\u003eAsymmetric\u003c\/li\u003e\n\u003cli\u003eTrueCrypt hidden partitions\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eSteganography\u003c\/li\u003e\n\u003cli\u003ePacking\u003c\/li\u003e\n\u003cli\u003eHidden devices (NAS)\u003c\/li\u003e\n\u003cli\u003eTunneling\/Onion routing\u003c\/li\u003e\n\u003cli\u003eDestruction\u003cul\u003e\n\u003cli\u003eWiping\/overwriting\u003c\/li\u003e\n\u003cli\u003eCorruption\/degaussing\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eSpoofing\u003cul\u003e\n\u003cli\u003eAddress spoofing\u003c\/li\u003e\n\u003cli\u003eData spoofing\u003c\/li\u003e\n\u003cli\u003eTimestomping\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003eLog tampering\u003c\/li\u003e\n\u003cli\u003eLive operating systems\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDay 5\u003c\/h4\u003e\n\u003cstrong\u003eNew \u0026amp; emerging technology\u003c\/strong\u003e\u003cul\u003e\n\u003cli\u003eLegal issues (privacy, obtaining warrants)\u003c\/li\u003e\n\u003cli\u003eSocial networks forensics\u003c\/li\u003e\n\u003cli\u003eTypes of social networks\u003c\/li\u003e\n\u003cli\u003eTypes of evidence\u003c\/li\u003e\n\u003cli\u003eCollecting data\u003c\/li\u003e\n\u003cli\u003eVirtualization\u003c\/li\u003e\n\u003cli\u003eVirtualization forensics\u003c\/li\u003e\n\u003cli\u003eUse of virtualization in forensics\u003c\/li\u003e\n\u003cli\u003eCloud forensics\u003c\/li\u003e\n\u003cli\u003eTypes of cloud services\u003c\/li\u003e\n\u003cli\u003eChallenges of cloud forensics\u003c\/li\u003e\n\u003cli\u003eBig data\u003c\/li\u003e\n\u003cli\u003eControl systems and IOT\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cstrong\u003eMobile forensics introduction\u003c\/strong\u003e\u003cul\u003e\n\u003cli\u003eTypes of devices\u003c\/li\u003e\n\u003cli\u003eGPS\u003c\/li\u003e\n\u003cli\u003eCell phones\u003c\/li\u003e\n\u003cli\u003eTablets\u003c\/li\u003e\n\u003cli\u003eVendor and carrier identification\u003c\/li\u003e\n\u003cli\u003eObtaining information from cellular provider\u003c\/li\u003e\n\u003cli\u003eGSM vs. CDMA\u003c\/li\u003e\n\u003cli\u003eCommon tools and methodology\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e","brand":"Infosec","offers":[{"title":"266D71US \/ 2026-06-08T09:30:00 \/ Online","offer_id":48833422262491,"sku":"US-2075-IL","price":3960.0,"currency_code":"USD","in_stock":true},{"title":"269C70US \/ 2026-09-14T09:30:00 \/ Online","offer_id":48833422295259,"sku":"US-2075-IL","price":3960.0,"currency_code":"USD","in_stock":true}],"url":"https:\/\/learningtreeinternational-dirinfosec-hhs.myshopify.com\/products\/computer-forensics-boot-camp-training","provider":"Learning Tree International","version":"1.0","type":"link"}