ACELab PC-3000 Flash Data Recovery Basic Online Training

ACElab-PC-3000-Hero-Image.jpg

PC-3000 Flash Data Recovery Basic Online Training

Live online events

1 day, 09:00 AM PDT - 05:00 PM PDT

Online

Provided by ACELab
  • $750.00 excl. Tax

1 day, 09:00 AM PST - 05:00 PM PST

Online

Provided by ACELab
  • $750.00 excl. Tax

Description

  1. How NAND-Flash drives work. 
  2. How to diagnose a non-working device.
  3. Physical recovery using the chip-off method.
  4. The main things you should keep in mind when recovering data from NAND-Flash drives.
  5. Types of NAND microchips and the PC-3000 Flash adapters to suit your data recovery needs.
  6. How to use the ECC correction to fix issues.
  7. How to get info on a NAND-Flash device after disassembling the controller and the memory chip.
  8. Possible issues with NAND-Flash drives and their causes.
  9. Diagnosing a non-working device.
  10. Logical recovery without the chip-off.
  11. How to diagnose a non-working device.
  12. Physical recovery using the chip-off method.
  13. Creating a new task in the PC-3000 Flash and reading out the microchip.
  14. How to use the ECC correction to fix issues.
  15. Executing a graph and correcting the ECC.
  16. Reading out the dump.
  17. How to read out the dump and use the Read/Retry option.
  18. Improving the quality of the dump by reading out the uncorrected sectors.
  19. How to convert the controller:
    • the XOR
    • the Page Transformation
    • the Interleave
    • the External Interleave
  20. The RAW Recovery: a method of research and recovery.
  21. How to assemble the image. 
  22. Implementing solutions for a task that was read out before.
  23. Using the PC-3000 Flash Solution Center.
  24. The transformations. PS2251-67 – the XOR, the Page Transformation.
  25. The transformations. SM3257EN – the XOR, the Page Transformation, the Interleave.
  26. The transformations. IS902 – the XOR, the Page Transformation, the Interleave, the Ext Interleave.
  27. The PC-3000 Flash Solution Center to solve cases in a few clicks.
  28. How to find a solution by controller type and memory chip ID.
  29. Automatic search for a solution.
  30. Implementing solutions, automatic transformations and building the logical image.
  31. Implementing solutions for a task that was read out before. Using the PC-3000 Flash Solution Center.
  32. Using methods to get extra data.
  33. The PC-3000 Flash Solution Center + AU6989 + the partition recovery.
  34. The RAW recovery on the graph and image, disk analysis, and search for partitions.
  35. Saving data, exporting the file system to another drive, saving the image into a file for a further analysis with third-party (e.g. forensic) tools.

Prerequisites

This class is open to forensic professionals and data recovery specialists.

Due to the sensitive nature of our curriculum, and industry, all potential students are subject to vetting prior to enrollment. We reserve the right to refuse registration to any person that does not meet our established criteria.