There is no tuition fee for this NW3C class for anyone actively employed with a State, Local or Tribal Law Enforcement agency.
For any class with a duration of 2 days or more, NW3C will charge Federal employees $750.00 per student. Agencies will receive an invoice upon completion of the training.
This 4 1/2 day course introduces the student to the identification and extraction of artifacts associated with Windows operating systems (XP through Windows 8) and the NT file system. Topical areas include named data streams, reparse points, encrypted objects, and a detailed examination of various registry artifacts to include mounted devices, the user assist key, security components and user specific information. Students will also examine event logs, volume shadow copy service, and thumbnails. The artifacts will be covered in a classroom and interactive setting which includes accessing suspect images in a virtual environment.
PREREQUISITES: This course requires the student have previous training in Cybercop 101 - BDRA and Cybercop 201 - IDRA, or the equivalent and experience drawn from the application of the techniques utilized in these classes.
There are 5 WinArt classes currently scheduled:
Mon, May 19, 2014
4.5 Days
Rocky Mountain Information Network, Inc
2001 W Pinnacle Peak Road, Suite 100
Phoenix, AZ 85027
Instructor(s): Jerry Jones, Joan Saltzman
Mon, Jun 02, 2014
4.5 Days
East Precinct/Headquarters
3035 Lexington Road
Athens, GA 30605
Instructor(s): Joan Saltzman, Scott Pancoast
Mon, Jul 28, 2014
4.5 Days
Richfield City Hall - Batholomew Room
6700 Portland Avenue South
Richfield, MN 55423
Instructor(s): Cynthia Gonnella
Mon, Aug 11, 2014
4.5 Days
Waterfront Commission of New York Harbor
100 Columbia Street
Brooklyn, NY 11201
Instructor Not Set
Mon, Nov 17, 2014
4.5 Days
1000 Calvert Street
Fort Worth, TX 76102
Instructor(s): Cynthia Gonnella, Michael Stern
| Description |
|---|
See Registration Link |