Objectives

This course is designed to advance the skill set of forensic examiners by focusing on internet artifacts and email analysis.

Completing this course will enable forensic examiners to:

• Understand the states of the World Wide Web
• Understand the nature of TCP/IP, DNS, DHCP, and communication ports
• Identify and understand the various forensic artifacts left by common internet browsers
• Identify and understand the various forensic artifacts left by common email applications
  

Prerequisites

This hands-on course is geared toward forensic investigators with at least six (6) months experience in forensic casework and with a basic understanding of Microsoft data structures.

Students should meet or exceed the following:

• Read and understand the English language
• Have previously attended basic digital forensic training
• Have prior investigative experience in forensic case work
• Have familiarity with the Microsoft Windows environment and data recovery concepts
  

Schedule