Class 1, January 14, 2008

Incident Response

Forensic Response

Windows Evidence Files

The Crime Scene

Syllabus

Class 2, January 22, 2008

Creating a Forensic Image

Imaging with FTK

Class 3, February 11, 2008

Windows Registry

Recycle Bin

Registry Quick Find Chart

Updated Syllabus

Class 4, February 24, 2008

Using FTK

Scenario

Computer Seizure Document

Other Media Seizure Document

File Header Signatures

Class 5, March 3, 2008

Encase 6 Overview

Class 6, March 10, 2008

Encase 6 E-Mail

EnCase 6 Internet

Encase 6 Overview

EnCase 6 Features