EnCase DF220
This four-day hands-on training offers practical demonstrations and case studies to better understand the EnCase Forensic Version 8 methodology. This training is not a replacement of the EnCase DF120 (previously Computer Forensics I) & EnCase DF210 (previously Computer Forensics II) training.
For whom is this training intended?
This training is intended for experienced digital investigators who want to make the step to using EnCase version 8. For example, EnCase version 6 users that have done the EnCase DF210 (Computer Forensics II) training or users with an ENCE certification. This training can also be applied as a refreshment course for users of version 7.
What will you learn during the training?
- The structural differences between EnCase version 8 and previous versions.
- Operation of the modules.
- The new file structure of the 'evidence files’ and the transition from previous versions.
- The new search feature.
- How to use external viewing tools.
- How to carry out hash analyses.
- Creating reports using the new templates.
- The archiving capabilities.