This course is designed for people with a working knowledge of computer forensics but looking to go deeper into specific skill and techniques of the the field. We cover techniques and examine devices that are more volatile or more difficult to access than a standard PC acquisition. This is the third course following my pervious course Computer Forensics Fundamentals and Intermediated Computer Forensics. While those course are recommended it is not required to take this course as they are independent in regard to topics taught.

AdvancedComputer Forensicswill provide:

• Ram Acquisition and Analysis

• Windows registry forensics

  • Hives and NTUSER.dat

• USB and network connections

• Live forensic acquisitions

• Search Signatures

• Non-traditional devices (Internet of Things), games systems, drones and camera systems

• Testifying in a court of law

The course will consist of presentations to explain the concepts of computer forensics as well as demonstrations of proper software andcollections of digital evidence, using primary open source or free software so that students can replicate the demonstrations on their own. Quizzes will reenforce the concepts.

This course is designed for anyone with an interest computer forensics to get a deepertaste of the real world of digital forensics examination.

As an advanced course it will consist of presentations, hands on lessons and quizs.