X-Ways Forensics II
Digital Forensic TrainingHome »
About This Course
Advanced 3-day training course for experienced users of X-Ways Forensics and previous attendees of the main course.
This course is not suitable as an introduction for new users of X-Ways Forensics
After attending this course and some self-study, you may start the X-PERT certification process.
Topics featured in this course may include:
Please note: Topics may include (not all guaranteed because of time constraints or for other reasons)
- .e01 evidence file format
- Creating skeleton images
- Creating cleansed images
- Capturing process memory
- Sector superimposition
- Working with evidence file containers
- Creating containers, understanding the available options
- Adding files to containers from various sources
- Closing containers, optionally converting them
- Using containers as evidence objects
- Finding and analyzing deleted partitions
- Capturing Memory Processes
- Reverse Imaging and Cloning Specialties
- Reconstructing RAID and Linux MD RAID systems
- Practical examples for RAID 0 and RAID 5
- Explanation of underlying data arrangements
- Clues towards finding the right parameters
- FuzZyDoc
- Conditional cell coloring
- UI Text Adjustments
- Custom keyboard shortcuts
- Advanced sorting rules
- Registry Viewer and Registry Reports, Registry Report definition files
- How X-Tensions work
- Recovering deleted NTFS-compressed files manually
- Block-wise hashing and matching
- Command line usage of X-Ways Forensics
- Indexing
- Customizing the registry report
- Templates
X-Ways Forensics II Course Details
- Location: No Courses Scheduled – please contact us to suggest a date.
- LEO/Govt Rate: $1580.00 CAD
- Private Sector: $1700.00 CAD
- Duration: 3 Days
- Additional Details:
This course is being hosted by Teel Technologies Canada, but all instruction is provided by F111th Consulting.
- This class is open to all forensic professionals. Invoices will be sent once training is confirmed after the minimum number of attendees has been reached. With this in mind, please do not make any travel plans that are not refundable.
- Due to the sensitive nature of our curriculum, and industry, all potential students are subject to vetting prior to enrollment. We reserve the right to refuse registration to any person that does not meet our established criteria.
- Laptop Requirements:
- Windows 7 or newer with full admin privileges. A dongle for training will be provided on site if required.