YPSILANTI ? Eastern Michigan University’s Center for Regional and National Security is hosting a course in October that provides an understanding of computer crime and discusses current challenges faced by Forensic Examiners.
Students will outline search and seizure issues and the ideal handling of electronic evidence.
Fundamentals core skills are also introduced – including:
Hard disk partition creation, formatting and geometry
Structure and implementation of the FAT File system
Forensic imaging of several physical storage media types
The course also provides a basic understanding of how computers work and how they ‘see’ data and manage its storage. While covering physical device concepts, students will learn the boot process of a computer – including forensic issues surrounding hard drive numbering and password protected systems.
The FAT file system will then be described in terms of system areas created during the Format process, the File Allocation Table and its function and detailed information regarding saving files and directories – to include a full breakdown of directory entries. In addition, concepts of clusters and file slack will be covered and lead in to identifying the affects of deleting files and forensic issues surrounding their recovery.
The course will finalize with students practicing hands labs using FTK Imager and hardware write protect devices to create duplicate images of Hard Disk Drives, USB Thumb drives and other alternate media.
This beginner level, hands-on intensive course is intended for newly assigned Computer Forensic Investigators, First Responders to computer crime scenes and those performing activities that have the potential to require seizing and imaging digital media.
The Forensic Fundamentals course includes an optional Practical Skills Assessment (PSA) that requires participants to apply concepts presented during the course to complete a practical exercise. Participants who successfully complete this exercise receive a certificate of PSA completion.
For more information, click on AccessData.Com
