FTK2.0 Transition Day

This is a full day hands-on training that will explore all the functionalities of FTK2.0.

This course is designed for those who have completed AccessData BootCamp.

Computer forensics involves acquiring, analysing, decrypting and reporting the stored or recorded digital information for use as evidence in civil, criminal or administrative cases. Law enforcement, network administrators, attorneys, and private investigators now rely on computer forensic software tools to aid in their investigations. AccessData’s Forensic Toolkit (FTK) enables organisations worldwide to analyse and search electronic evidence in computer-related crimes including, terrorism, intellectual property and personal identity theft, corporate fraud, child exploitation, illegal commerce and company policy violations.

In this workshop attendees will install and configure the new FTK version 2.0.

Exercises will include:
o Configuring new usability modes with user defined TABs and docking panes
o Creating and processing cases – to include GUID partition based evidence
o Creating filters with the newly enhanced File Filter Manager – to include nested filters as rules
o Using the new content viewer to play videos and examine Unicode character set information
o Using the new “divot” functionality
o Creating bookmarks with the new bookmark manager – to include nested bookmarks, new comment fields, multiple file position markers and more.
o Using the new report wizard to develop drag and drop report fields, new sort fields and new thumbnail and bookmark enhancements.

In addition to learning new features, differences between FTK 1.x and 2.0 architecture will be discussed. Topics discussed include:
o Simultaneous multiple user case access
o The use of the relational Oracle database
o True multi-threaded processing for immediate data access
o Upcoming distributed client/server architecture for case analysis
o User defined permissions and access (ignorable and privileged data)

Enhanced data processing feature aspects will be covered relating to:
o EXIF information
o Registry file initialisation
o Enhanced email format support
o User interactive case file type categorisation
o FTK encrypted file identification and decryption

This course is a must for FTK1.X users wishing to transition to the new FTK 2.0.

June 27th 2008 in Manchester

July 18th 2008 in London

Sept 5th 2008 in London

Oct 31st 2008 in Manchester

Dec 5th 2008 in London

Please call 01296 621121 or email jackie@dataduplication.co.uk for pricing and availability