European Cybercrime Training and Education Group

Home About Members Courses Apply for courses Contact

ECTEG course - Live Data Forensics

Title: Live Data Forensics
Year: December 2015 - Version 1.0
Duration: 1 week (post pre-read)

Course Aim

The aim of this course is to provide an introduction to Live Data Forensics and the use of Live Forensics investigative techniques.


This course is an Intermediate level module and relates to Forensic Computing. The target student group would include current practitioners in the field of live data forensics who have previously attended and passed the ECTEG Introductory IT Forensics & Network Investigations course or similar training.

A number of short pre-read modules must be completed before participating in the 5-day "in-class" training. Topics include Using Virtual Machines, Memory Analysis, Windows Command-Line Interface, Documenting & Reporting and Conducting Searches on Scene.

Students will need to be able to understand and communicate in English.

Small list of agenda / topics / main points

If you are interested in applying for these courses please see take a look at the application page for more information.