Computer Forensic Training Center Online
offers a self-paced training course designed for professionals such as network administrators, MIS and IS specialists, auditors, fraud examiners, investigators and similar specialists who may encounter computer media that contains potential evidence or other significant data.
This course will teach you how to forensically recover all of the data from the DOS, Windows 9.x and NTFS logical structures utilized by Windows NT, 2000 and XP operating systems so that it may be used in hearings or other proceedings.
Self-Paced Approach
We feel the self-paced approach to training is a superior learning method to any one or two week classroom training course. Our training method gives you much more time to understand and "digest" the material and as much time as it takes to learn and practice the skills necessary to conduct forensic examinations, and to interact with your coach. It allows you to proceed to the next topic when you have learned and understand the material, whenever you are ready and also allows for interruptions caused by work or family and doesn't require 100% of your time while taking the course.
Methodologies
The course will teach and emphasize using sound forensic processes and methodologies to conduct forensic examinations. We teach the manual recovery of evidence/data from magnetic media by use of specially prepared practical exercises. These practical exercises are precisely prepared to teach you the skills that you need to conduct forensically sound examinations.
Practical Exercises
The practical exercises teach you the skills to create and verify forensically sterile examination media, to create forensic boot diskettes, to make forensic copies of media, to find and recover deleted, formatted, hidden and lost data, to access mail, cache and other internet related files, to unlock passwords, data format conversion, to provide opinions regarding examinations and a complete hands-on examination of a specially prepared hard disk drive with real life forensic issues.
Course Length
Typically the course takes about 4 months to complete.
|
A forensic examiner must be able to answer questions like:

This course will teach you how to answer that question, and similar technical questions, in clear concise terms that will be understandable in court, in a hearing or to others.
Course Highlights:
The course covers all aspects of a forensic examination including:
| - |
Forensic ethical issues |
| - |
Forensic examination procedures |
| - |
Preparing and verifying forensically sterile examination media |
| - |
Basic operating system issues |
| - |
Hardware issues specific to forensic examinations |
| - |
Basic network issues |
| - |
Preparing and verifying forensically sterile examination media |
| - |
The proper methods to initially acquire or seize the original media and minimize the potential for the loss or corruption of data |
| - |
How to preserve the original media and prevent accidental writes to or alteration of the original media |
| - |
How to find and access all of the data on the media including:
- Normal files
- Deleted files
- Hidden files
- Data from formatted disks
- Encrypted files
- Swap files
- Temporary files
- Data in unused (unallocated) space that is not linked to a file
- Cache Files
- The various types of Email files
- Internet cookie files
|
| - |
The significance and determination of the various date and time stamps |
| - |
Data types, data format conversion and managing data |
| - |
Note taking and writing good reports |
| - |
Presenting the data to the client or attorney in a manner that is clear and understandable |
| - |
How to draw expert conclusions |
Personal Coaching
You will be assigned a Certified Forensic Computer Examiner as an instructor who will teach you any issues that you may need help with. We want you to learn the material. We will answer and explain any questions that involve any of the issues covered during the course.
|
CEUs
Through a training partnership with Kennesaw State University, this program will provide 15 CEU credits (approximately 150 CPE credits) upon completion.
Certification
Students will be provided with a certificate of completion of our forensic computer examination course.
There are currently two certifications available. One from the High Tech Crime Network and one from the International Association of Computer Investigative Specialists (IACIS).
Authorized Training Site
Computer Forensic Training Center Online has been certified as an Authorized Training Site for the High Tech Crime Network (HTCN).
After completion of the training you are eligible, without further training or testing, to obtain the High Tech Crime Network Certified Computer Forensic Technician [Basic] certification. In addition to our training, candidates are required to have:
| - |
Two (2) years investigative experience in any discipline (law enforcement or corporate) or possess a college degree and one (1) year investigative experience in any discipline. |
| - |
Six (6) months investigative experience directly related to computer forensics (law enforcement or corporate). |
Certified Instructors
All of our instructors are certified forensic computer examiners who are currently conducting forensic examinations. The staff and the instructors truly care about you and want you to learn the material.
Cost
US $2,750.00
Includes software and utilities. Click here for payment options, computer requirements and all the FAQs.

|