This course provides students with the knowledge and skills necessary to install, configure, and effectively use the combined abilities of AccessData's Forensic Toolkit (FTK), FTK Imager, Registry Viewer, and Password Recovery Toolkit® (PRTK®) to locate and examine email messages, deleted files, free space and file slack. Additionally, students will learn how to search for and export graphic files, export and gain access to encrypted files from multiple industry-standard applications, document digital media information, work with multiple forensic image formats and much more.

Tool Validation is a one-day course providing students with the information and concepts necessary for creating testing and verification methodology for forensic tools and labs. Using AccessData’s Forensic Toolkit, students will follow the process of tool testing including; planning, risk assessment, building and validation of testing images, and reporting.

Forensic Toolkit 301 is a four-day course covering advanced features and techniques for using AccessData’s Forensic Toolkit. This course covers features like the Python Scripter, Facial Recognition, regular expression and TR1 searching, advanced filesystem artifacts, and more. This course will take deeper dives into various artifacts across multiple operating systems involved in many different types of investigations. This course is designed for a student that has taken the preceding courses or has experience using FTK tools.

Forensic Toolkit 201 is a four-day course that builds on the skills and concepts learned in Forensic Toolkit 101. FTK 201 is a forensic artifact-based course, and takes a deeper dive into artifact analysis using the FTK tools. This course will guide students through various Windows operating system artifacts, documents, media files investigations and more. This course also includes training in AccessData’s new forensic review tool, QView. This course assumes that the student has taken the preceding courses or has experience using the FTK tools.

FTK Enterprise 105 is a three-day course that gives corporate professionals an in-depth hands-on training in the features and processes for using FTK Enterprise. This course will cover role assignment, permissions management, remote acquisition using FTK’s agent deployment, memory analysis, and more. Enterprise 105 is primarily tool-based training teaching the features and functions of the tool. This course is designed for students that have taken FTK 101 or are experienced users of FTK or FTK Enterprise.

Forensic Toolkit 101 is a four-day course that will introduce the student to AccessData’s Forensic Toolkit (FTK) and the many features that aid the investigator in solving a wide variety of cases effectively. Over the four-day course students will get hands on time with each of the features within FTK. This course is designed for both new users to forensics, or those with years of forensic experience. While this course will use forensic artifacts to demonstrate the features, the focus of FTK 101 is to really teach the features and processes available to the investigator. This course serves as a foundation for the courses FTK Enterprise 105, FTK 201, and FTK 301.

Registry Viewer 100 is a one-day course that will introduce the student to AccessData’s Registry Viewer. With Registry Viewer an investigator can quickly and effectively view Windows Registry hive files, and the keys and information stored within them. This course will also cover the basics of how the Windows Registry functions, and students will learn how to search for relevant information, save frequent locations of evidence for later cases, and create reports using Registry Viewer.

FTK Imager 100 is a one-day course that will introduce the student to AccessData’s free powerful imaging solution, FTK Imager. This course will not only cover the features and process for using Imager, but will also explain the technology and concepts behind the process. Included within the course is the AccessData Certified Technician (ACT) certification. FTK Imager 100 covers how to create a forensic image using various types of image formats, view evidence from various sources, creating custom content images, and using the triage features found in FTK Imager.

This course provides students with the knowledge and skills necessary to install, configure, and effectively use the combined abilities of AccessData's Forensic Toolkit (FTK), FTK Imager, Registry Viewer, and Password Recovery Toolkit® (PRTK®) to locate and examine email messages, deleted files, free space and file slack. Additionally, students will learn how to search for and export graphic files, export and gain access to encrypted files from multiple industry-standard applications, document digital media information, work with multiple forensic image formats and much more.

Forensic Toolkit 301 is a four-day course covering advanced features and techniques for using AccessData’s Forensic Toolkit. This course covers features like the Python Scripter, Facial Recognition, regular expression and TR1 searching, advanced filesystem artifacts, and more. This course will take deeper dives into various artifacts across multiple operating systems involved in many different types of investigations. This course is designed for a student that has taken the preceding courses or has experience using FTK tools.

Forensic Toolkit 201 is a four-day course that builds on the skills and concepts learned in Forensic Toolkit 101. FTK 201 is a forensic artifact-based course, and takes a deeper dive into artifact analysis using the FTK tools. This course will guide students through various Windows operating system artifacts, documents, media files investigations and more. This course also includes training in AccessData’s new forensic review tool, QView. This course assumes that the student has taken the preceding courses or has experience using the FTK tools.

FTK Enterprise 105 is a three-day course that gives corporate professionals an in-depth hands-on training in the features and processes for using FTK Enterprise. This course will cover role assignment, permissions management, remote acquisition using FTK’s agent deployment, memory analysis, and more. Enterprise 105 is primarily tool-based training teaching the features and functions of the tool. This course is designed for students that have taken FTK 101 or are experienced users of FTK or FTK Enterprise.

Forensic Toolkit 101 is a four-day course that will introduce the student to AccessData’s Forensic Toolkit (FTK) and the many features that aid the investigator in solving a wide variety of cases effectively. Over the four-day course students will get hands on time with each of the features within FTK. This course is designed for both new users to forensics, or those with years of forensic experience. While this course will use forensic artifacts to demonstrate the features, the focus of FTK 101 is to really teach the features and processes available to the investigator. This course serves as a foundation for the courses FTK Enterprise 105, FTK 201, and FTK 301.

Password Recovery Toolkit 100 is a two-day course that will introduce the student to AccessData’s Password Recovery Toolkit (PRTK). This course will cover the concepts of encryption and decryption methods needed to break into some of the world’s common encryption solutions. This course covers all the features and processes needed to get the most out of PRTK, including the integration with AccessData’s FTK and FTK Enterprise solutions.

Registry Viewer 100 is a one-day course that will introduce the student to AccessData’s Registry Viewer. With Registry Viewer an investigator can quickly and effectively view Windows Registry hive files, and the keys and information stored within them. This course will also cover the basics of how the Windows Registry functions, and students will learn how to search for relevant information, save frequent locations of evidence for later cases, and create reports using Registry Viewer.

FTK Imager 100 is a one-day course that will introduce the student to AccessData’s free powerful imaging solution, FTK Imager. This course will not only cover the features and process for using Imager, but will also explain the technology and concepts behind the process. Included within the course is the AccessData Certified Technician (ACT) certification. FTK Imager 100 covers how to create a forensic image using various types of image formats, view evidence from various sources, creating custom content images, and using the triage features found in FTK Imager.

The AccessData FTK Investigations class, built specifically for the Techno Conference in Myrtle Beach, South Carolina. This course will provide the necessary skills and information necessary to conduct various types of investigations using AccessData’s Forensic Toolkit