Advanced IT-Forensik (AITF)

 

Who should attend

  • IT-Security appointees
  • EDV Revisors
  • Members of Incident Response Teams

Prerequisites

Course Objectives

This course is based on the IT-Forensik (ITF) course and deals with the data system NTFS. In addition you will learn where and when Windows creates protocol files which can help in a detailed system analysis.

Course Content

Intensive examination with NTFS

  • Organisation of files and directories
  • EFS encrypted files
  • Comprimised files
  • Sparse files

Artefacts of user activities

  • Program starts and pre fetch files
  • Evaluation of the registry
  • User profiles
  • Link files
  • Spool files from print orders
  • Internet activities
  • Previews
  • Restore Points

Duration: 3 days

Prices (excl. VAT):
  • Switzerland: Fr. 2,690.-
  • Germany: 1,790.- €
 
Click on the location to go directly to the booking pageSchedule
Switzerland

Currently there are no local training dates scheduled.  For enquiries please write to info@flane.ch.

Germany
18/06/2012 - 20/06/2012 Hamburg
13/08/2012 - 15/08/2012 Frankfurt
15/10/2012 - 17/10/2012 Munich
10/12/2012 - 12/12/2012 Düsseldorf