Title: Live Data Forensics
Year: December 2015 - Version 1.0
Duration: 1 week (post pre-read)
The aim of this course is to provide an introduction to Live Data Forensics and the use of Live Forensics investigative techniques.
This course is an Intermediate level module and relates to Forensic Computing. The target student group would include current practitioners in the field of live data forensics who have previously attended and passed the ECTEG Introductory IT Forensics & Network Investigations course or similar training.
A number of short pre-read modules must be completed before participating in the 5-day "in-class" training. Topics include Using Virtual Machines, Memory Analysis, Windows Command-Line Interface, Documenting & Reporting and Conducting Searches on Scene.
Students will need to be able to understand and communicate in English.
Small list of agenda / topics / main points
All courses that have been developed for ECTEG are freely available for law enforcement organisations. They include all necessary slides as well as manuals for trainers and students. The courses include the following properties: