Forensic Tools

AccessData Digital Investigations Training is designed to educate forensic professionals and incident responders in the latest technology and prepare them with innovative ideas and workflows to improve and strengthen their skills in identifying, responding, investigating, prosecuting and adjudicating cases. The Digital Investigations Training program consists of Live In-Person and Live On-Line technology training courses that will improve how professionals use AccessData’s Forensic Toolkit®, AD Enterprise and AD Lab collaborative technologies.

Live Online Training (Europe - GMT) Forensic Tools Training Schedule

Instructor-led online training

Instructor-Led Training Course	Oct 2021	Nov 2021	Dec 2021
FTK Bootcamp This course provides students with the knowledge and skills necessary to install, configure, and effectively use the combined abilities of AccessData's Forensic Toolkit (FTK), FTK Imager, Registry Viewer, and Password Recovery Toolkit® (PRTK®) to locate and examine email messages, deleted files, free space and file slack. Additionally, students will learn how to search for and export graphic files, export and gain access to encrypted files from multiple industry-standard applications, document digital media information, work with multiple forensic image formats and much more.		Nov 9 - Nov 11
Tool Validation Tool Validation is a one-day course providing students with the information and concepts necessary for creating testing and verification methodology for forensic tools and labs. Using AccessData’s Forensic Toolkit, students will follow the process of tool testing including; planning, risk assessment, building and validation of testing images, and reporting.	Oct 21 - Oct 21		Dec 16 - Dec 16
Forensic Toolkit 101 Forensic Toolkit 101 is a four-day course that will introduce the student to AccessData’s Forensic Toolkit (FTK) and the many features that aid the investigator in solving a wide variety of cases effectively. Over the four-day course students will get hands on time with each of the features within FTK. This course is designed for both new users to forensics, or those with years of forensic experience. While this course will use forensic artifacts to demonstrate the features, the focus of FTK 101 is to really teach the features and processes available to the investigator. This course serves as a foundation for the courses FTK Enterprise 105, FTK 201, and FTK 301.			Dec 7 - Dec 10
FTK Imager 100 FTK Imager 100 is a one-day course that will introduce the student to AccessData’s free powerful imaging solution, FTK Imager. This course will not only cover the features and process for using Imager, but will also explain the technology and concepts behind the process. Included within the course is the AccessData Certified Technician (ACT) certification. FTK Imager 100 covers how to create a forensic image using various types of image formats, view evidence from various sources, creating custom content images, and using the triage features found in FTK Imager.			Dec 14 - Dec 14

Live Online Training - Session 1 (Central US Time Zone) Forensic Tools Training Schedule

Instructor-led online training

Instructor-Led Training Course	Sep 2021	Oct 2021	Nov 2021	Dec 2021
Advanced SQLite and Database Analysis This course is free for any Learning Pass holders Advanced SQLite and Database Analysis - Query Writing takes a deep dive into SQLite query writing. Attendees will spend three days learning to write SQLiite queries which allow the examiner to retrieve the information they need, in the format they need. The course will start with the basics, and build on those skills to write more advanced queries. If you are interested in taking this course, look into our different Forensic Learning Pass options to get this class and much more.		Oct 19 - Oct 21
FTK Bootcamp This course provides students with the knowledge and skills necessary to install, configure, and effectively use the combined abilities of AccessData's Forensic Toolkit (FTK), FTK Imager, Registry Viewer, and Password Recovery Toolkit® (PRTK®) to locate and examine email messages, deleted files, free space and file slack. Additionally, students will learn how to search for and export graphic files, export and gain access to encrypted files from multiple industry-standard applications, document digital media information, work with multiple forensic image formats and much more.		Oct 26 - Oct 28		Dec 14 - Dec 16
Tool Validation Tool Validation is a one-day course providing students with the information and concepts necessary for creating testing and verification methodology for forensic tools and labs. Using AccessData’s Forensic Toolkit, students will follow the process of tool testing including; planning, risk assessment, building and validation of testing images, and reporting.		Oct 8 - Oct 8		Dec 10 - Dec 10
Forensic Toolkit 301 Forensic Toolkit 301 is a four-day course covering advanced features and techniques for using AccessData’s Forensic Toolkit. This course covers features like the Python Scripter, Facial Recognition, regular expression and TR1 searching, advanced filesystem artifacts, and more. This course will take deeper dives into various artifacts across multiple operating systems involved in many different types of investigations. This course is designed for a student that has taken the preceding courses or has experience using FTK tools.	Sep 28 - Oct 1		Nov 16 - Nov 19
Forensic Toolkit 201 Forensic Toolkit 201 is a four-day course that builds on the skills and concepts learned in Forensic Toolkit 101. FTK 201 is a forensic artifact-based course, and takes a deeper dive into artifact analysis using the FTK tools. This course will guide students through various Windows operating system artifacts, documents, media files investigations and more. This course also includes training in AccessData’s new forensic review tool, QView. This course assumes that the student has taken the preceding courses or has experience using the FTK tools.	Sep 21 - Sep 24		Nov 9 - Nov 12
FTK Enterprise 105 FTK Enterprise 105 is a three-day course that gives corporate professionals an in-depth hands-on training in the features and processes for using FTK Enterprise. This course will cover role assignment, permissions management, remote acquisition using FTK’s agent deployment, memory analysis, and more. Enterprise 105 is primarily tool-based training teaching the features and functions of the tool. This course is designed for students that have taken FTK 101 or are experienced users of FTK or FTK Enterprise.		Oct 26 - Oct 28		Dec 7 - Dec 9
Forensic Toolkit 101 Forensic Toolkit 101 is a four-day course that will introduce the student to AccessData’s Forensic Toolkit (FTK) and the many features that aid the investigator in solving a wide variety of cases effectively. Over the four-day course students will get hands on time with each of the features within FTK. This course is designed for both new users to forensics, or those with years of forensic experience. While this course will use forensic artifacts to demonstrate the features, the focus of FTK 101 is to really teach the features and processes available to the investigator. This course serves as a foundation for the courses FTK Enterprise 105, FTK 201, and FTK 301.		Oct 19 - Oct 22	Nov 30 - Dec 3
Password Recovery Toolkit 100 Password Recovery Toolkit 100 is a two-day course that will introduce the student to AccessData’s Password Recovery Toolkit (PRTK). This course will cover the concepts of encryption and decryption methods needed to break into some of the world’s common encryption solutions. This course covers all the features and processes needed to get the most out of PRTK, including the integration with AccessData’s FTK and FTK Enterprise solutions.		Oct 6 - Oct 7		Dec 8 - Dec 9
Registry Viewer 100 Registry Viewer 100 is a one-day course that will introduce the student to AccessData’s Registry Viewer. With Registry Viewer an investigator can quickly and effectively view Windows Registry hive files, and the keys and information stored within them. This course will also cover the basics of how the Windows Registry functions, and students will learn how to search for relevant information, save frequent locations of evidence for later cases, and create reports using Registry Viewer.		Oct 5 - Oct 5		Dec 7 - Dec 7
FTK Imager 100 FTK Imager 100 is a one-day course that will introduce the student to AccessData’s free powerful imaging solution, FTK Imager. This course will not only cover the features and process for using Imager, but will also explain the technology and concepts behind the process. Included within the course is the AccessData Certified Technician (ACT) certification. FTK Imager 100 covers how to create a forensic image using various types of image formats, view evidence from various sources, creating custom content images, and using the triage features found in FTK Imager.		Oct 4 - Oct 4		Dec 6 - Dec 6

Classes in bold are guaranteed to run!