The First Responders Computer Forensics BootCamp runs 3 days from 8/20 - 8/22. The cost for the 3 day BootCamp is $1,995 per person, which includes a first responder software bundle. ($1,250 without software)

Ultimate Digital First Responder Training Course

This intensive hands-on course trains participants with the ‘First Responder’ skills necessary to address digital computer forensic and cyber crimes or incidents. Students will learn how to capture digital evidence from live, virtual, RAID systems and other media devices. Additionally, students will learn how to create forensic images, perform swift and effective analysis in 30-minutes or less, and work with world class tools from ADF Solutions, Logicube, AccessData, Tableau, Digital Intelligence and GetData.

Day One:

• Introduction to Digital Computer Crimes
• Defining Digital Computer Forensics
• Digital First Responders’ Methodologies
• What to do at the Scene of the Digital Crime
• Fundamentals for the First Responder
• Computer Hardware
• Computer Software
• Capturing Evidence from a Live system
• How to deal with RAID environments
• How to deal with Virtual Machines
• GetData’s MountImagePro
• Features and functions
• First Responder questioning techniques
• Introduction to Triage-ID – using Scan Setup,
• Report-Viewer and SearchPaks

At the completion of Day-1 students will have an understanding of the current trends and tools regarding Digital Computer Forensics.

In addition students will be introduced to the GetData MountImagePro, AccessData FTK Imager and ADF Solutions Triage-ID tools.

Day Two:

• Advanced Hard Disk Drive Topics
• Structures
• Storage Space
• Read-Write Speeds
• Triage-ID Intermediate Skills
• Scan-Setup Options
• SearchPaks
• Keyword Search
• Working with Triage-ID Reports
• Triage-ID Advanced Skills
• Writing SearchPaks
• MD5 HASH matches
• Image Signatures
• Regular Expressions
• Triage-ID Certification Exam

At the completion Day-2 students will be fully versed in using the ADF Solutions Triage-ID software. Students will be familiar with commonly used forensics terms and topics such as MD5 hashes, Image Signatures, Key word searches and Regular Expressions.

Day Three:

• Forensic Hand-held imaging tools
• Logicube Quest
• Features and functions
• Logicube Talon
• Features and functions
• OmniClone high-speed duplication systems for IT and Forensic uses
• Forensic Software imaging tools
• AccessData FTK Imager Features and functions
• Helix Features and functions
• Other Digital imaging tools and devices for capturing evidence of forensic interest

• What are Forensic Bridges
• What are Forensic Write-Blockers
• Working with Bridges and Blockers
• Tableau Forensic SATA/IDE Bridge
• Features and functions
• Tableau Forensic USB Bridge
• Features and functions
• Tableau Forensic Read/Write Bridges
• Features and functions
• Digital Intelligence UltraKit
• Introduction to the Microsoft Registry
• AccessData Registry Viewer
• Features and functions
• Course Review
• Hands-on Proficiency Exam

At the completion of Day-3 students will have an understanding on how to use forensic tools that capture digital evidence. Students will know how to use hardware tools from Logicube and software tools from AccessData.

At the completion of Day-3 students will know how to use Tableau’s forensic bridges and blockers. They will also understand the evidentiary value of the Microsoft Registry.

Students will also demonstrate their knowledge by taking a Hands-on Practical Skills exam.

Each student will receive the H-11 Digital Forensics ‘Digital First Responder Kit’

This kit consists of fully licensed tools from ADF Solutions, AccessData, Tableau and Logicube.

Travel:
If traveling from out of town, we recommend participants arrive the day before class begins. The classroom holds 12 people and we will be full. As such please confirm the number of attendees ASAP. 

In regards to lodging, there are a number of hotels along the I-290 corridor near the Training Center.  We recommend Priceline or Hotels.com.  The area of town is called Brookhollow.  It is Area 1 if you are using Priceline, name your own price.  If you prefer calling hotels directly, a couple hotels near by are:
Crowne Plaza Houston
12801 Northwest Freeway, Houston, TX 77040
Phone: 1 713-462-9977 Fax: 1 713-460-8725
Hampton Inn Houston-Brookhollow
12909 Northwest Freeway, Houston, Texas, USA 77040
Tel: +1-713-939-7100  Fax: +1-713-939-0088

A rental car is recommended for transportation.  Taxi service typically costs around $70 one-way, to/from the airport to/from local hotels. 

SuperShuttle is also available for $27 one-way, to/from the airport to/from local hotels.  For reservations please contact SuperShuttle at 800-258-3826.

For those that are flying out on Friday after the course, we recommend scheduling flights after 6:30PM to ensure plenty of time to get to the airport. We recommend flying in and out of Houston Intercontinental Airport (IAH) as it is about 40 minutes from the training center.