Difference between pages "Prefetch" and "Training Courses and Providers"

From Forensics Wiki
(Difference between pages)
Jump to: navigation, search
 
 
Line 1: Line 1:
−
{{Expand}}
+
This is the list of Scheduled Training Courses, referred to by [[Upcoming_events]].  Please refer to the instructions on the [[Upcoming_events]] page if you wish to edit this page.
−
Windows Prefetch files, introduced in [[Windows|Windows XP]], are designed to speed up the application startup process. Prefetch files contain the name of the executable, a Unicode list of DLLs used by that executable, a count of how many times the executable has been run, and a timestamp indicating the last time the program was run. Although Prefetch is present in Windows 2003, by default it is only enabled for boot prefetching. The feature is also found in [[Windows Vista]], where it has been augmented with [[SuperFetch]], [[ReadyBoot]], and [[ReadyBoost]].
+
  
−
Up to 128 Prefetch files are stored in the <tt>%SystemRoot%\Prefetch</tt> directory [http://blogs.msdn.com/ryanmy/archive/2005/05/25/421882.aspx]. Each file in that directory should contain the name of the application (up to eight (?) characters), a dash, and then an eight character hash of the location from which that application was run, and a <tt>.pf</tt> extension. The filenames should be all uppercase except for the extension. The format of hashes is not known. A sample filename for [[md5deep]] would look like: <tt>MD5DEEP.EXE-4F89AB0C.pf</tt>. If an application is run from two different locations on the drive (i.e. the user runs <tt>C:\md5deep.exe</tt> and then <tt>C:\Apps\Hashing\md5deep.exe</tt>), there will be two different prefetch files in the Prefetch folder.
+
The Conference and Training List is provided by the American Academy of Forensic Sciences (AAFS) Digital and Multi-media Listserv.
 +
<i> (Subscribe by sending an email to listserv@lists.mitre.org with message body containing SUBSCRIBE AAFS-DIGITAL-MULTIMEDIA-LIST)</i>
 +
Requests for additions, deletions or corrections to this list may be sent by email to David Baker <i>(bakerd AT mitre.org)</i>.
  
−
 
+
{| border="0" cellpadding="2" cellspacing="2" align="top"
−
== Signature ==  
+
|- style="background:#bfbfbf; font-weight: bold"
−
Each Prefetch file has a signature in the first 8 bytes of the file. Windows XP will generate Prefetch files with the signature \x11\x00\x00\x00\x53\x43\x43\x41 (0x41434353 0x00000011). Windows 7 and Windows Vista Prefetch file's signature is \x17\x00\x00\x00\x53\x43\x43\x41 (0x41434353 0x00000017). The [http://en.wikipedia.org/wiki/ASCII ASCII] representation of these bytes will display "....SCCA".
+
! Title
−
 
+
! Date/Location
−
== Timestamps ==
+
! Website
−
 
+
! Limitation
−
Both the [[NTFS]] timestamps for a Prefetch file and the timestamp embedded in each Prefetch file contain valuable information. The timestamp embedded within the Prefetch file is a 64-bit (QWORD) [http://msdn2.microsoft.com/en-us/library/ms724284.aspx FILETIME] object The creation date of the file indicates the first time the application was executed. Both the modification date of the file and the embedded timestamp indicate the last time the application was executed.
+
|-
−
 
+
|Core Skills for the Investigation of Computer Crime
−
Windows will store timestamps according to Windows [http://msdn.microsoft.com/en-us/library/ms724290%28VS.85%29.aspx epoch].
+
|Apr 28-May 02, Sacramento, CA
−
 
+
|http://www.search.org/programs/hightech/calendar.asp
−
==== Creation Time ====
+
|Limited To Law Enforcement
−
The creation time does not have a static offset on any Windows platform. The location of the creation time can be found using the offset 0x8 + length of Volume path offset.
+
|-
−
 
+
|Qualified Software Security Expert Bootcamp
−
==== Last Run Time ====
+
|April 28-May 02, Reston, VA
−
A timestamp of when the application was last ran is embedded into the Prefetch file. The offset to the "Last Run Time" is located at offset 0x78 from the beginning of the file on [[Windows]] XP. The offset for Windows Vista and Windows 7 is at 0x80.  
+
|http://www.securityuniversity.net/classes_SI_SoftwareSecurity_Bootcamp.php
−
 
+
|-
−
== MetaData ==
+
|EC-Council Certified Security Analyst/Qualified Security Analyst/Pen Testing Methods
−
==== Header ====
+
|April 28-May 02, San Francisco, CA
−
In each Prefetch file, the size of the header is stored and can be found at offset 0x54 on Windows XP, Windows Vista, and Windows 7. The header size for Windows XP is 0x98 (152) and 0xf0 (240) on Windows Vista and Windows 7.
+
|http://www.securityuniversity.net/classes_QSH.php
−
 
+
|-
−
The Prefetch file will embed the application's name into the header at offset 0x10.
+
|Licensed Penetration Tester/Qualified Penetration Tester
−
 
+
|April 28-May 02, San Francisco, CA
−
==== Run Count ====
+
|http://www.securityuniversity.net/classes_Licensed_Penetration_Tester.php
−
The run count, or number of times the application has been run, is a 4-byte (DWORD) value located at offset 0x90 from the beginning of the file on [[Windows]] XP. On Windows Vista and Windows 7, the run time can be found at 0x98.
+
|-
−
 
+
|Introduction to Automated Forensic Tools(AFT)
−
==== Volume ====
+
|Apr 28-May 01, St. Louis, MO
−
Volume related information, volume path and volume serial number, are embedded into the Prefetch file. The precise offset for this information varies for each application ran. In the header at offset 0x6c, the location of the volume path is stored. The location is a 4-bytes (DWORD) value. The offset 0x6c is consistent for Windows XP and Windows 7.
+
|http://www.nw3c.org/ocr/courses_desc.cfm
−
 
+
|Limited to Law Enforcement
−
At the location given from 0ffst 0x6c, a 4 byte value is stored which is the number of bytes from current offset (location from offset 0x6c) to the beginning of the volume path. The location from offset 0x6c, for ease, will be called the "volume path offset." The volume path is embedded as a NULL-terminating string.
+
|-
−
 
+
|EnCase&reg; v6 Computer Forensics II
−
The length of the volume path is a 4-byte value is located at volume path offset + 0x4.
+
|Apr 29-May 02, Houston, TX and Washington DC
−
 
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
−
The volume [http://en.wikipedia.org/wiki/Volume_serial_number serial number] is a 4-byte value that identifies a media storage. A serial number does not have a consistent offset within a Prefetch between Windows operating systems. The 4-byte value can be found eight (8) bytes from the creation time location. The [http://en.wikipedia.org/wiki/Vol_%28command%29 vol] command on Windows can verify the volume serial number.
+
|-
−
 
+
|EnCase&reg; v6 Computer Forensics I
−
== See Also ==
+
|Apr 29-May 02, Los Angeles, CA
−
* [[SuperFetch]]
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
−
* [[Prefetch XML]]
+
|-
−
 
+
|EnCase&reg; v6 NTFS
−
== External Links ==
+
|Apr 29-May 02, United Kingdom
−
* [http://milo2012.wordpress.com/2009/10/19/windows-prefetch-folder-tool/ Prefetch-Tool Script] - Python looks Prefetch files up on a web server.
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
−
* [http://www.mitec.cz/wfa.html Windows File Analyzer] - Parses Prefetch files, thumbnail databases, shortcuts, index.dat files, and the recycle bin
+
|-
−
* [http://www.microsoft.com/whdc/driver/kernel/XP_kernel.mspx#ECLAC Microsoft's description of Prefetch when Windows XP was introduced]
+
|EnCase&reg; v6 Advanced Internet Examinations
−
* [http://msdn.microsoft.com/msdnmag/issues/01/12/XPKernel/default.aspx More detail from Microsoft]
+
|Apr 29-May 02, Washington DC
−
* [http://www.tzworks.net/prototype_page.php?proto_id=1 Windows Prefetch parser] Free tool that can be run on Windows, Linux or Mac OS-X.
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData&reg; BootCamp
 +
|Apr 29-May 01, Ft Lauderdale, FL
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|Computer Hacking Forensic Investigator/Qualified Forensics Investigator
 +
|May 05-09, San Francisco, CA
 +
|http://www.securityuniversity.net/classes_CHFI.php
 +
|-
 +
|EnCase&reg; v6 Advanced Computer Forensics
 +
|May 06-09, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Computer Forensics II
 +
|May 06-09, Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; Enterprise v6 - Phase I
 +
|May 06-09, Chicago, IL and Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData&reg; BootCamp
 +
|May 06-08, Manchester, United Kingdom andSydney, NSW, Australia
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|AccessData&reg; Windows Forensics
 +
|May 06-08, New York City, NY
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|Seized Computer Evidence Recovery Specialist (SCERS)
 +
|May 12-23, Glynco, GA
 +
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation
 +
|Limited to Law Enforcement
 +
|-
 +
|Internet Investigations Training Program (IITP)
 +
|May 12-16, Glynco, GA
 +
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation
 +
|Limited to Law Enforcement
 +
|-
 +
|Qualified Software Security Expert Bootcamp
 +
|May 12-16, San Francisco, CA
 +
|http://www.securityuniversity.net/classes_SI_SoftwareSecurity_Bootcamp.php
 +
|-
 +
|Fast CyberForensic Triage(FCT)
 +
|May 12-15, Meriden, CT
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited to Law Enforcement
 +
|-
 +
|EnCase&reg; Enterprise v6 - Phase II
 +
|May 12-15, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Secure Techniques for Onsite Preview(STOP)
 +
|May 12-13, Pullman, WA
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited to Law Enforcement
 +
|-
 +
|EnCase&reg; v6 Computer Forensics I
 +
|May 13-16, Chicago, IL
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Computer Forensics II
 +
|May 13-16, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Advanced Computer Forensics
 +
|May 13-16, Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 FIM/Mobile Use of EE Live Forensics
 +
|May 13-16, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData&reg; Windows Forensics
 +
|May 13-15, Sydney, NSW, Australia
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|AccessData&reg; Internet Forensics
 +
|May 13-15, Ft Lauderdale, FL
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|Advanced Responders - Search and Seizure of SOHO Networks
 +
|May 13-15, Sacramento, CA
 +
|http://www.search.org/programs/hightech/calendar.asp
 +
|Limited To Law Enforcement
 +
|-
 +
|Secure Techniques for Onsite Preview(STOP)
 +
|May 14-15, Pullman, WA
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited to Law Enforcement
 +
|-
 +
|Macintosh Forensic Survival Course (MFSC)
 +
|May 19-23, Grand Rapids, MI
 +
|http://www.forwarddiscovery.com/shop/index.php?act=viewCat&catId=3
 +
|-
 +
|Basic On-Line Technical Skills(BOTS)
 +
|May 19, Lynchburg, VA
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited to Law Enforcement
 +
|-
 +
|BlackBag Introductory MacIntosh Forensics
 +
|May 19-23, Santa Clara, CA
 +
|http://www.blackbagtech.com/products/training.htm
 +
|-
 +
|Core Skills for the Investigation of Computer Crime
 +
|May 19-23, Sacramento, CA
 +
|http://www.search.org/programs/hightech/calendar.asp
 +
|Limited To Law Enforcement
 +
|-
 +
|Boot Camp Certified Wireless Network Admin/Wireless Security Professional
 +
|May 20-29, San Francisco, CA
 +
|http://www.securityuniversity.net/www.classes_wireless_bootcamp.php
 +
|-
 +
|EnCase&reg; v6 Computer Forensics II
 +
|May 20-23, United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Computer Forensics I
 +
|May 20-23, Houston, TX and Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Advanced Computer Forensics
 +
|May 20-23, Chicago, IL
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Certified Wireless Network Administrator
 +
|May 20-23, San Francisco, CA
 +
|http://www.securityuniversity.net/www.classes_wireless_CWNA.php
 +
|-
 +
|AccessData&reg; Windows Forensics
 +
|May 20-22, London, United Kingdom
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|Certified Wireless Network Administrator
 +
|May 26-30, Rome Italy
 +
|http://www.securityuniversity.net/www.classes_wireless_CWNA.php 
 +
|-
 +
|Certified Wireless Security Professional
 +
|May 26-29, San Francisco, CA
 +
|http://www.securityuniversity.net/classes_wireless_CWSP.php
 +
|-
 +
|Certified Ethical Hacker/Qualified Security Hacker/Network Defender
 +
|May 26-30, Reston, VA
 +
|http://www.securityuniversity.net/classes_QSH.php
 +
|-
 +
|EnCase&reg; v6 Computer Forensics II
 +
|May 27-30, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Catching the Hackers Intro to IDS
 +
|May 27-30, Reston, VA
 +
|http://www.securityuniversity.net/classes_introIDS.php
 +
|-
 +
|AccessData&reg; BootCamp
 +
|May 27-29, San Jose, CA
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|Computer Network Investigations Training Program (CNITP)
 +
|Jun 02-13, Glynco, GA
 +
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation
 +
|Limited to Law Enforcement
 +
|-
 +
|ILook® Automated Forensic Application(ILook)
 +
|Jun 02-06, Vassalboro, ME
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited to Law Enforcement
 +
|-
 +
|EC-Council Certified Security Analyst/Qualified Security Analyst/Pen Testing Methods
 +
|Jun 02-06, Reston, VA
 +
|http://www.securityuniversity.net/classes_anti-hacking_pentest.php
 +
|-
 +
|Licensed Penetration Tester/Qualified Penetration Tester
 +
|Jun 02-06, Reston, VA
 +
|http://www.securityuniversity.net/classes_Licensed_Penetration_Tester.php
 +
|-
 +
|EnCase® v6 Computer Forensics I
 +
|Jun 02-06, Pasig City, Phillipines
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Core Skills for the Investigation of Cellular Telephones
 +
|Jun 02-05, Sacramento, CA
 +
|http://www.search.org/programs/hightech/calendar.asp
 +
|Limited To Law Enforcement
 +
|-
 +
|EnCase&reg; v6 Computer Forensics I
 +
|Jun 03-06, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 NTFS
 +
|Jun 03-06, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Computer Forensics II
 +
|Jun 03-06, Chicago, IL and Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Advanced Internet Examinations
 +
|Jun 03-06, United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Network Intrusion Investigations - Phase I
 +
|Jun 03-06, Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData&reg; BootCamp
 +
|Jun 03-05, London, United Kingdom
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|Macintosh Forensic Survival Course (MFSC)
 +
|Jun 09-13, San Jose, CA
 +
|http://www.forwarddiscovery.com/shop/index.php?act=viewCat&catId=3
 +
|Limited to Law Enforcement
 +
|-
 +
|Certified Ethical Hacker/Qualified Security Hacker/Network Defender
 +
|Jun 09-13, Reston, VA  and Online-instructor led/Distance Learning
 +
|http://www.securityuniversity.net/classes_QSH.php
 +
|-
 +
|Core Skills for the Investigation of Cellular Telephones
 +
|Jun 09-12, Sacramento, CA
 +
|http://www.search.org/programs/hightech/calendar.asp
 +
|Limited To Law Enforcement
 +
|-
 +
|X-Ways Forensics
 +
|Jun 09-11, New York City, NY
 +
|http://www.x-ways.net/training/new_york.html
 +
|-
 +
|Certified Wireless Network Admin/Wireless Security Professional Bootcamp
 +
|Jun 10-19, Reston, VA
 +
|http://www.securityuniversity.net/classes_wireless_bootcamp.php
 +
|-
 +
|Computer Hacking Forensic Investigator/Qualified Forensics Expert
 +
|Jun 10-13, Reston, VA
 +
|http://www.securityuniversity.net/classes_CHFI.php
 +
|-
 +
|Certified Wireless Network Administrator
 +
|Jun 10-13, Reston, VA
 +
|http://www.securityuniversity.net/classes_CWNA.php
 +
|-
 +
|AccessData&reg; BootCamp
 +
|Jun 10-12, St Paul, MN
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|Neutrino-Mobile Phone Forensics
 +
|Jun 10-11, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Computer Forensics I
 +
|Jun 10-13, Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Advanced Computer Forensics
 +
|Jun 10-13, United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 FIM/Mobile Use of EE Live Forensics
 +
|Jun 10-13, Chicago, IL
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Computer Forensics II
 +
|Jun 10-13, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|File Systems Revealed
 +
|Jun 12-13, New York City, NY
 +
|http://www.x-ways.net/training/new_york.html
 +
|-
 +
|Computer Network Investigations Training Program (CNITP)
 +
|Jun 16-27, Glynco, GA
 +
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation
 +
|Limited to Law Enforcement
 +
|-
 +
|Intermediate Data Recovery and Analysis(IDRA)
 +
|Jun 16-20, St. Louis, MO
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited to Law Enforcement
 +
|-
 +
|Certified Ethical Hacker/Qualified Security Hacker Class
 +
|Jun 16-20, Rome Italy
 +
|http://www.securityuniversity.net/classes_QSH.php 
 +
|-
 +
|Basic Data Recovery and Acquisition(BDRA)
 +
|Jun 16-19, Hamilton, NJ
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited to Law Enforcement
 +
|-
 +
|Certified Wireless Security Professional
 +
|Jun 16-19, Reston, VA
 +
|http://www.securityuniversity.net/classes_CWSP.php
 +
|-
 +
|EnCase® v6 Computer Forensics II
 +
|Jun 16-19, Pasig City, Phillipines
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Computer Forensics I
 +
|Jun 17-20, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Advanced Internet Examinations
 +
|Jun 17-20, Chicago, IL
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Network Intrusion Investigations - Phase I
 +
|Jun 17-20, United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Neutrino-Mobile Phone Forensics
 +
|Jun 17-18, Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Computer Forensics II
 +
|Jun 17-20, Los Angeles, CA and Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Advanced Computer Forensics
 +
|Jun 17-20, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Introduction to Automated Forensic Tools(AFT)
 +
|Jun 23-27, Meriden, CT
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited to Law Enforcement
 +
|-
 +
|BlackBag Introductory MacIntosh Forensics
 +
|Jun 23-27, Washington D.C.
 +
|http://www.blackbagtech.com/products/training.htm
 +
|-
 +
|Macintosh Forensic Survival Course (MFSC)
 +
|Jun 23-27, Melbourne, Australia
 +
|http://www.forwarddiscovery.com/shop/index.php?act=viewCat&catId=3
 +
|Limited to Law Enforcement
 +
|-
 +
|Secure Techniques for Onsite Preview(STOP)
 +
|Jun 23-24, Shawano, WI
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited to Law Enforcement
 +
|-
 +
|e-fense - Live Forensics and Incident Response Featuring Helix
 +
|Jun 24-26, Jacksonville, FL
 +
|https://www.e-fense.com/register.php
 +
|-
 +
|EnCase&reg; v6 Computer Forensics I
 +
|Jun 24-27, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Network Intrusion Investigations - Phase I
 +
|Jun 24-27, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Advanced Internet Examinations
 +
|Jun 24-27, Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; Enterprise v6 - Phase I
 +
|Jun 24-27, Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Advanced Computer Forensics
 +
|Jun 24-27, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Computer Forensics II
 +
|Jun 24-27, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData&reg; Windows Forensics
 +
|Jun 24-26, Manchester, United Kingdom
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|Advanced Responders - Search and Seizure of SOHO Networks
 +
|Jun 24-26, Sacramento, CA
 +
|http://www.search.org/programs/hightech/calendar.asp
 +
|Limited To Law Enforcement
 +
|-
 +
|Secure Techniques for Onsite Preview(STOP)
 +
|Jun 25-26, Shawano, WI
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited to Law Enforcement
 +
|-
 +
|Macintosh Forensic Survival Course (MFSC)
 +
|Jun 30-Jul 04, Brisbane, Australia
 +
|http://www.forwarddiscovery.com/shop/index.php?act=viewCat&catId=3
 +
|Limited to Law Enforcement
 +
|-
 +
|EnCase&reg; Enterprise v6 - Phase II
 +
|Jun 30-Jul 03, Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData&reg; BootCamp
 +
|Jul 01-03, Manchester, United Kingdom
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|BlackBag Intermediate MacIntosh Forensics
 +
|Jul 07-11, Los Angeles, CA
 +
|http://www.blackbagtech.com/products/training.htm
 +
|Limited to Law Enforcement
 +
|-
 +
|Linux /Unix Security
 +
|Jul 07-10, Reston, VA
 +
|http://www.securityuniversity.net/classes_linux_sec.php
 +
|-
 +
|Certified Ethical Hacker/Qualified Security Hacker/Network Defender
 +
|Jul 07-10, San Francisco, CA
 +
|http://www.securityuniversity.net/classes_QSH.php
 +
|-
 +
|Mobile Device Investigations Program (MDIP)
 +
|Jul 14-18, Glynco, GA
 +
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation
 +
|Limited to Law Enforcement
 +
|-
 +
|AccessData&reg; Applied Decryption
 +
|Jul 15-17, St Paul, MN
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|AccessData&reg; Windows Forensics
 +
|Jul 15-17, London, United Kingdom
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|Computer Network Investigations Training Program (CNITP)
 +
|Jul 21-Aug 01, Glynco, GA
 +
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation
 +
|Limited to Law Enforcement
 +
|-
 +
|Internet Investigations Training Program (IITP
 +
|Jul 21-25, Glynco, GA
 +
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation
 +
|Limited to Law Enforcement
 +
|-
 +
|BlackBag Intermediate MacIntosh Forensics
 +
|Jul 21-25, Santa Clara, CA
 +
|http://www.blackbagtech.com/products/training.htm
 +
|-
 +
|EC-Council Certified Security Analyst/Qualified Security Analyst/Pen Testing Methods
 +
|Jul 21-25, San Francisco, CA
 +
|http://www.securityuniversity.net/classes_anti-hacking_pentest.php
 +
|-
 +
|Licensed Penetration Tester/Qualified Penetration Tester
 +
|Jul 21-25, San Francisco, CA
 +
|http://www.securityuniversity.net/classes_Licensed_Penetration_Tester.php
 +
|-
 +
|AccessData&reg; Windows Forensics
 +
|Jul 22-24, St Louis, MO
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|Computer Hacking Forensic Investigator/Qualified Forensics Expert
 +
|July 26-Aug 01, San Francisco, CA
 +
|http://www.securityuniversity.net/classes_CHFI.php
 +
|-
 +
|ILook® Automated Forensic Application(ILook)
 +
|Jul 28-Aug 01, St. Louis, MO
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited to Law Enforcement
 +
|-
 +
|Certified Wireless Network Administrator
 +
|July 28-Aug 01, San Francisco, CA
 +
|http://www.securityuniversity.net/www.classes_wireless_CWNA.php
 +
|-
 +
|Certified Wireless Network Admin/Wireless Security Professional Bootcamp
 +
|July 29-Aug 07, San Francisco, CA
 +
|http://www.securityuniversity.net/classes_wireless_bootcamp.php
 +
|-
 +
|Macintosh Forensic Survival Course (MFSC)
 +
|Aug 04-08, Huntington Beach, CA
 +
|http://www.forwarddiscovery.com/shop/index.php?act=viewCat&catId=3
 +
|-
 +
|Certified Wireless Network Admin/Wireless Security Professional Bootcamp
 +
|Aug 05-14, Reston, VA
 +
|http://www.securityuniversity.net/classes_wireless_bootcamp.php
 +
|-
 +
|Certified Wireless Network Administrator
 +
|Aug 05-08, Reston, VA
 +
|http://www.securityuniversity.net/classes_wireless_CWNA.php
 +
|-
 +
|AccessData&reg; BootCamp
 +
|Aug 05-07, London, United Kingdom
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|AccessData&reg; Windows Forensics
 +
|Aug 05-07, Louisville, KY
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|Limited to Law Enforcement
 +
|-
 +
|Certified Wireless Security Professional
 +
|Aug 11-14, Reston, VA
 +
|http://www.securityuniversity.net/classes_wireless_CWSP.php
 +
|-
 +
|AccessData&reg; Windows Forensics
 +
|Aug 12-14, St Paul, MN
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|AccessData&reg; BootCamp
 +
|Aug 12-14, Albany, NY and New York City, NY
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|Digital Evidence Acquisition Specialist Training Program (DEASTP)
 +
|Aug 18-29, Glynco, GA
 +
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation
 +
|Limited to Law Enforcement
 +
|-
 +
|BlackBag Introductory MacIntosh Forensics
 +
|Aug 18-22, Santa Clara, CA
 +
|http://www.blackbagtech.com/products/training.htm
 +
|-
 +
|AccessData&reg; BootCamp
 +
|Aug 19-21, Manchester, United Kingdom
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|AccessData&reg; BootCamp
 +
|Aug 26-28, Ft Lauderdale, FL
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|AccessData&reg; BootCamp
 +
|Sep 02-04, London, United Kingdom
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|Seized Computer Evidence Recovery Specialist (SCERS)
 +
|Sep 08-19, Glynco, GA
 +
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation
 +
|Limited to Law Enforcement
 +
|-
 +
|BlackBag Introductory MacIntosh Forensics
 +
|Sep 08-12, Washington D.C.
 +
|http://www.blackbagtech.com/products/training.htm
 +
|-
 +
|Macintosh Forensic Survival Course (MFSC)  
 +
|Sep 08-12, Bellingham, WA
 +
|http://www.forwarddiscovery.com/shop/index.php?act=viewCat&catId=3
 +
|-
 +
|Windows NT File System(NTFS)
 +
|Sep 08-11, St. Louis, MO
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited to Law Enforcement
 +
|-
 +
|ILook® Automated Forensic Application(ILook)
 +
|Sep 15-19, Meriden, CT
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited to Law Enforcement
 +
|-
 +
|EnCase&reg; v6 Computer Forensics II
 +
|Sep 16-19, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData&reg; Windows Forensics
 +
|Sep 16-18, Columbia, SC
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|EnCase&reg; v6 Advanced Computer Forensics
 +
|Sep 23-26, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData&reg; Windows Forensics
 +
|Sep 23-25, London, United Kingdom
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|AccessData&reg; BootCamp
 +
|Sep 23-25, Dallas, TX
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|AccessData&reg; Applied Decryption
 +
|Sep 23-25, Ft Lauderdale, FL
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|EnCase&reg; v6 Computer Forensics II
 +
|Sep 30-Oct 03, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData&reg; Applied Decryption
 +
|Oct 07-09, London, UK
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|AccessData&reg; Windows Forensics
 +
|Oct 07-09, Las Vegas, NV and New York City, NY
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|AccessData&reg; BootCamp
 +
|Oct 14-16, Louisville, KY
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|Limited to Law Enforcement
 +
|-
 +
|Windows NT Operating System(NTOS)
 +
|Oct 20-23, St. Louis, MO
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited to Law Enforcement
 +
|-
 +
|EnCase&reg; v6 Computer Forensics II
 +
|Oct 21-24, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 EnScript&reg;  Programming - Phase I
 +
|Oct 28-31, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData&reg; Windows Forensics
 +
|Oct 28-30, Manchester, United Kingdom
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|Macintosh Forensic Survival Course (MFSC)
 +
|Nov 03-07, Bern, Switzerland
 +
|http://www.forwarddiscovery.com/shop/index.php?act=viewCat&catId=3
 +
|-
 +
|Windows NT File System(NTFS)
 +
|Nov 03-06, Meriden, CT
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited to Law Enforcement
 +
|-
 +
|EnCase&reg; v6 Computer Forensics II
 +
|Nov 04-07, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData&reg; BootCamp
 +
|Nov 04-06, London, United Kingdom
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|AccessData&reg; Internet Forensics
 +
|Nov 04-06, St Paul, MN
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|AccessData&reg; Windows Forensics
 +
|Nov 04-06, Albany, NY
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|BlackBag Intermediate MacIntosh Forensics
 +
|Nov 17-21, Washington D.C.
 +
|http://www.blackbagtech.com/products/training.htm
 +
|-
 +
|EnCase&reg; v6 Network Intrusion Investigations - Phase I
 +
|Nov 18-21, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase&reg; v6 Computer Forensics II
 +
|Nov 25-28, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData&reg; Internet Forensics
 +
|Nov 25-27, Manchester, United Kingdom
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|Windows Internet Trace Evidence(INET)
 +
|Dec 01-05, St. Louis, MO
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited to Law Enforcement
 +
|-
 +
|AccessData&reg; Windows Forensics
 +
|Dec 02-04, Ft Lauderdale, FL; New York City, NY; and London, United Kingdom
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|Windows NT Operating System(NTOS)
 +
|Dec 08-11, Meriden, CT
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited to Law Enforcement
 +
|-
 +
|EnCase&reg; v6 Computer Forensics II
 +
|Dec 09-12, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData&reg; Internet Forensics
 +
|Dec 09-11, Dallas, TX and New York City, NY
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|AccessData&reg; Windows Forensics
 +
|Dec 09-11, Louisville, KY
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|Limited to Law Enforcement
 +
|-
 +
|EnCase&reg; v6 Advanced Computer Forensics
 +
|Dec 16-19, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData&reg; BootCamp
 +
|Dec 16-18, Manchester, United Kingdom
 +
|http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
 +
|-
 +
|**__2009 EVENTS__**
 +
|_______2009_______
 +
|-
 +
|Linux File System for Computer Forensic Examiners(Linux)
 +
|Jan 12-16, 2009, St. Louis, MO
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited to Law Enforcement
 +
|-
 +
|Windows Internet Trace Evidence(INET)
 +
|Jan 19-23, 2009, Meriden, CT
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited to Law Enforcement
 +
|-
 +
|Linux File System for Computer Forensic Examiners(Linux)
 +
|Mar 02-06, 2009, Meriden, CT
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited to Law Enforcement
 +
|-
 +
|}

Revision as of 07:21, 22 April 2008

This is the list of Scheduled Training Courses, referred to by Upcoming_events. Please refer to the instructions on the Upcoming_events page if you wish to edit this page.

The Conference and Training List is provided by the American Academy of Forensic Sciences (AAFS) Digital and Multi-media Listserv. (Subscribe by sending an email to listserv@lists.mitre.org with message body containing SUBSCRIBE AAFS-DIGITAL-MULTIMEDIA-LIST) Requests for additions, deletions or corrections to this list may be sent by email to David Baker (bakerd AT mitre.org).

Title Date/Location Website Limitation
Core Skills for the Investigation of Computer Crime Apr 28-May 02, Sacramento, CA http://www.search.org/programs/hightech/calendar.asp Limited To Law Enforcement
Qualified Software Security Expert Bootcamp April 28-May 02, Reston, VA http://www.securityuniversity.net/classes_SI_SoftwareSecurity_Bootcamp.php
EC-Council Certified Security Analyst/Qualified Security Analyst/Pen Testing Methods April 28-May 02, San Francisco, CA http://www.securityuniversity.net/classes_QSH.php
Licensed Penetration Tester/Qualified Penetration Tester April 28-May 02, San Francisco, CA http://www.securityuniversity.net/classes_Licensed_Penetration_Tester.php
Introduction to Automated Forensic Tools(AFT) Apr 28-May 01, St. Louis, MO http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
EnCase® v6 Computer Forensics II Apr 29-May 02, Houston, TX and Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Computer Forensics I Apr 29-May 02, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 NTFS Apr 29-May 02, United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Advanced Internet Examinations Apr 29-May 02, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData® BootCamp Apr 29-May 01, Ft Lauderdale, FL http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
Computer Hacking Forensic Investigator/Qualified Forensics Investigator May 05-09, San Francisco, CA http://www.securityuniversity.net/classes_CHFI.php
EnCase® v6 Advanced Computer Forensics May 06-09, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Computer Forensics II May 06-09, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® Enterprise v6 - Phase I May 06-09, Chicago, IL and Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData® BootCamp May 06-08, Manchester, United Kingdom andSydney, NSW, Australia http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
AccessData® Windows Forensics May 06-08, New York City, NY http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
Seized Computer Evidence Recovery Specialist (SCERS) May 12-23, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation Limited to Law Enforcement
Internet Investigations Training Program (IITP) May 12-16, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation Limited to Law Enforcement
Qualified Software Security Expert Bootcamp May 12-16, San Francisco, CA http://www.securityuniversity.net/classes_SI_SoftwareSecurity_Bootcamp.php
Fast CyberForensic Triage(FCT) May 12-15, Meriden, CT http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
EnCase® Enterprise v6 - Phase II May 12-15, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
Secure Techniques for Onsite Preview(STOP) May 12-13, Pullman, WA http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
EnCase® v6 Computer Forensics I May 13-16, Chicago, IL http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Computer Forensics II May 13-16, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Advanced Computer Forensics May 13-16, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 FIM/Mobile Use of EE Live Forensics May 13-16, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData® Windows Forensics May 13-15, Sydney, NSW, Australia http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
AccessData® Internet Forensics May 13-15, Ft Lauderdale, FL http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
Advanced Responders - Search and Seizure of SOHO Networks May 13-15, Sacramento, CA http://www.search.org/programs/hightech/calendar.asp Limited To Law Enforcement
Secure Techniques for Onsite Preview(STOP) May 14-15, Pullman, WA http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
Macintosh Forensic Survival Course (MFSC) May 19-23, Grand Rapids, MI http://www.forwarddiscovery.com/shop/index.php?act=viewCat&catId=3
Basic On-Line Technical Skills(BOTS) May 19, Lynchburg, VA http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
BlackBag Introductory MacIntosh Forensics May 19-23, Santa Clara, CA http://www.blackbagtech.com/products/training.htm
Core Skills for the Investigation of Computer Crime May 19-23, Sacramento, CA http://www.search.org/programs/hightech/calendar.asp Limited To Law Enforcement
Boot Camp Certified Wireless Network Admin/Wireless Security Professional May 20-29, San Francisco, CA http://www.securityuniversity.net/www.classes_wireless_bootcamp.php
EnCase® v6 Computer Forensics II May 20-23, United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Computer Forensics I May 20-23, Houston, TX and Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Advanced Computer Forensics May 20-23, Chicago, IL http://www.guidancesoftware.com/training/course_schedule.aspx
Certified Wireless Network Administrator May 20-23, San Francisco, CA http://www.securityuniversity.net/www.classes_wireless_CWNA.php
AccessData® Windows Forensics May 20-22, London, United Kingdom http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
Certified Wireless Network Administrator May 26-30, Rome Italy http://www.securityuniversity.net/www.classes_wireless_CWNA.php
Certified Wireless Security Professional May 26-29, San Francisco, CA http://www.securityuniversity.net/classes_wireless_CWSP.php
Certified Ethical Hacker/Qualified Security Hacker/Network Defender May 26-30, Reston, VA http://www.securityuniversity.net/classes_QSH.php
EnCase® v6 Computer Forensics II May 27-30, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
Catching the Hackers Intro to IDS May 27-30, Reston, VA http://www.securityuniversity.net/classes_introIDS.php
AccessData® BootCamp May 27-29, San Jose, CA http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
Computer Network Investigations Training Program (CNITP) Jun 02-13, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation Limited to Law Enforcement
ILook® Automated Forensic Application(ILook) Jun 02-06, Vassalboro, ME http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
EC-Council Certified Security Analyst/Qualified Security Analyst/Pen Testing Methods Jun 02-06, Reston, VA http://www.securityuniversity.net/classes_anti-hacking_pentest.php
Licensed Penetration Tester/Qualified Penetration Tester Jun 02-06, Reston, VA http://www.securityuniversity.net/classes_Licensed_Penetration_Tester.php
EnCase® v6 Computer Forensics I Jun 02-06, Pasig City, Phillipines http://www.guidancesoftware.com/training/course_schedule.aspx
Core Skills for the Investigation of Cellular Telephones Jun 02-05, Sacramento, CA http://www.search.org/programs/hightech/calendar.asp Limited To Law Enforcement
EnCase® v6 Computer Forensics I Jun 03-06, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 NTFS Jun 03-06, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Computer Forensics II Jun 03-06, Chicago, IL and Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Advanced Internet Examinations Jun 03-06, United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Network Intrusion Investigations - Phase I Jun 03-06, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData® BootCamp Jun 03-05, London, United Kingdom http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
Macintosh Forensic Survival Course (MFSC) Jun 09-13, San Jose, CA http://www.forwarddiscovery.com/shop/index.php?act=viewCat&catId=3 Limited to Law Enforcement
Certified Ethical Hacker/Qualified Security Hacker/Network Defender Jun 09-13, Reston, VA and Online-instructor led/Distance Learning http://www.securityuniversity.net/classes_QSH.php
Core Skills for the Investigation of Cellular Telephones Jun 09-12, Sacramento, CA http://www.search.org/programs/hightech/calendar.asp Limited To Law Enforcement
X-Ways Forensics Jun 09-11, New York City, NY http://www.x-ways.net/training/new_york.html
Certified Wireless Network Admin/Wireless Security Professional Bootcamp Jun 10-19, Reston, VA http://www.securityuniversity.net/classes_wireless_bootcamp.php
Computer Hacking Forensic Investigator/Qualified Forensics Expert Jun 10-13, Reston, VA http://www.securityuniversity.net/classes_CHFI.php
Certified Wireless Network Administrator Jun 10-13, Reston, VA http://www.securityuniversity.net/classes_CWNA.php
AccessData® BootCamp Jun 10-12, St Paul, MN http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
Neutrino-Mobile Phone Forensics Jun 10-11, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Computer Forensics I Jun 10-13, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Advanced Computer Forensics Jun 10-13, United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 FIM/Mobile Use of EE Live Forensics Jun 10-13, Chicago, IL http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Computer Forensics II Jun 10-13, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
File Systems Revealed Jun 12-13, New York City, NY http://www.x-ways.net/training/new_york.html
Computer Network Investigations Training Program (CNITP) Jun 16-27, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation Limited to Law Enforcement
Intermediate Data Recovery and Analysis(IDRA) Jun 16-20, St. Louis, MO http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
Certified Ethical Hacker/Qualified Security Hacker Class Jun 16-20, Rome Italy http://www.securityuniversity.net/classes_QSH.php
Basic Data Recovery and Acquisition(BDRA) Jun 16-19, Hamilton, NJ http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
Certified Wireless Security Professional Jun 16-19, Reston, VA http://www.securityuniversity.net/classes_CWSP.php
EnCase® v6 Computer Forensics II Jun 16-19, Pasig City, Phillipines http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Computer Forensics I Jun 17-20, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Advanced Internet Examinations Jun 17-20, Chicago, IL http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Network Intrusion Investigations - Phase I Jun 17-20, United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
Neutrino-Mobile Phone Forensics Jun 17-18, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Computer Forensics II Jun 17-20, Los Angeles, CA and Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Advanced Computer Forensics Jun 17-20, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
Introduction to Automated Forensic Tools(AFT) Jun 23-27, Meriden, CT http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
BlackBag Introductory MacIntosh Forensics Jun 23-27, Washington D.C. http://www.blackbagtech.com/products/training.htm
Macintosh Forensic Survival Course (MFSC) Jun 23-27, Melbourne, Australia http://www.forwarddiscovery.com/shop/index.php?act=viewCat&catId=3 Limited to Law Enforcement
Secure Techniques for Onsite Preview(STOP) Jun 23-24, Shawano, WI http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
e-fense - Live Forensics and Incident Response Featuring Helix Jun 24-26, Jacksonville, FL https://www.e-fense.com/register.php
EnCase® v6 Computer Forensics I Jun 24-27, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Network Intrusion Investigations - Phase I Jun 24-27, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Advanced Internet Examinations Jun 24-27, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® Enterprise v6 - Phase I Jun 24-27, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Advanced Computer Forensics Jun 24-27, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Computer Forensics II Jun 24-27, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData® Windows Forensics Jun 24-26, Manchester, United Kingdom http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
Advanced Responders - Search and Seizure of SOHO Networks Jun 24-26, Sacramento, CA http://www.search.org/programs/hightech/calendar.asp Limited To Law Enforcement
Secure Techniques for Onsite Preview(STOP) Jun 25-26, Shawano, WI http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
Macintosh Forensic Survival Course (MFSC) Jun 30-Jul 04, Brisbane, Australia http://www.forwarddiscovery.com/shop/index.php?act=viewCat&catId=3 Limited to Law Enforcement
EnCase® Enterprise v6 - Phase II Jun 30-Jul 03, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData® BootCamp Jul 01-03, Manchester, United Kingdom http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
BlackBag Intermediate MacIntosh Forensics Jul 07-11, Los Angeles, CA http://www.blackbagtech.com/products/training.htm Limited to Law Enforcement
Linux /Unix Security Jul 07-10, Reston, VA http://www.securityuniversity.net/classes_linux_sec.php
Certified Ethical Hacker/Qualified Security Hacker/Network Defender Jul 07-10, San Francisco, CA http://www.securityuniversity.net/classes_QSH.php
Mobile Device Investigations Program (MDIP) Jul 14-18, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation Limited to Law Enforcement
AccessData® Applied Decryption Jul 15-17, St Paul, MN http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
AccessData® Windows Forensics Jul 15-17, London, United Kingdom http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
Computer Network Investigations Training Program (CNITP) Jul 21-Aug 01, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation Limited to Law Enforcement
Internet Investigations Training Program (IITP Jul 21-25, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation Limited to Law Enforcement
BlackBag Intermediate MacIntosh Forensics Jul 21-25, Santa Clara, CA http://www.blackbagtech.com/products/training.htm
EC-Council Certified Security Analyst/Qualified Security Analyst/Pen Testing Methods Jul 21-25, San Francisco, CA http://www.securityuniversity.net/classes_anti-hacking_pentest.php
Licensed Penetration Tester/Qualified Penetration Tester Jul 21-25, San Francisco, CA http://www.securityuniversity.net/classes_Licensed_Penetration_Tester.php
AccessData® Windows Forensics Jul 22-24, St Louis, MO http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
Computer Hacking Forensic Investigator/Qualified Forensics Expert July 26-Aug 01, San Francisco, CA http://www.securityuniversity.net/classes_CHFI.php
ILook® Automated Forensic Application(ILook) Jul 28-Aug 01, St. Louis, MO http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
Certified Wireless Network Administrator July 28-Aug 01, San Francisco, CA http://www.securityuniversity.net/www.classes_wireless_CWNA.php
Certified Wireless Network Admin/Wireless Security Professional Bootcamp July 29-Aug 07, San Francisco, CA http://www.securityuniversity.net/classes_wireless_bootcamp.php
Macintosh Forensic Survival Course (MFSC) Aug 04-08, Huntington Beach, CA http://www.forwarddiscovery.com/shop/index.php?act=viewCat&catId=3
Certified Wireless Network Admin/Wireless Security Professional Bootcamp Aug 05-14, Reston, VA http://www.securityuniversity.net/classes_wireless_bootcamp.php
Certified Wireless Network Administrator Aug 05-08, Reston, VA http://www.securityuniversity.net/classes_wireless_CWNA.php
AccessData® BootCamp Aug 05-07, London, United Kingdom http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
AccessData® Windows Forensics Aug 05-07, Louisville, KY http://www.accessdata.com/common/pagedetail.aspx?PageCode=train Limited to Law Enforcement
Certified Wireless Security Professional Aug 11-14, Reston, VA http://www.securityuniversity.net/classes_wireless_CWSP.php
AccessData® Windows Forensics Aug 12-14, St Paul, MN http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
AccessData® BootCamp Aug 12-14, Albany, NY and New York City, NY http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
Digital Evidence Acquisition Specialist Training Program (DEASTP) Aug 18-29, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation Limited to Law Enforcement
BlackBag Introductory MacIntosh Forensics Aug 18-22, Santa Clara, CA http://www.blackbagtech.com/products/training.htm
AccessData® BootCamp Aug 19-21, Manchester, United Kingdom http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
AccessData® BootCamp Aug 26-28, Ft Lauderdale, FL http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
AccessData® BootCamp Sep 02-04, London, United Kingdom http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
Seized Computer Evidence Recovery Specialist (SCERS) Sep 08-19, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation Limited to Law Enforcement
BlackBag Introductory MacIntosh Forensics Sep 08-12, Washington D.C. http://www.blackbagtech.com/products/training.htm
Macintosh Forensic Survival Course (MFSC) Sep 08-12, Bellingham, WA http://www.forwarddiscovery.com/shop/index.php?act=viewCat&catId=3
Windows NT File System(NTFS) Sep 08-11, St. Louis, MO http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
ILook® Automated Forensic Application(ILook) Sep 15-19, Meriden, CT http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
EnCase® v6 Computer Forensics II Sep 16-19, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData® Windows Forensics Sep 16-18, Columbia, SC http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
EnCase® v6 Advanced Computer Forensics Sep 23-26, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData® Windows Forensics Sep 23-25, London, United Kingdom http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
AccessData® BootCamp Sep 23-25, Dallas, TX http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
AccessData® Applied Decryption Sep 23-25, Ft Lauderdale, FL http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
EnCase® v6 Computer Forensics II Sep 30-Oct 03, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData® Applied Decryption Oct 07-09, London, UK http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
AccessData® Windows Forensics Oct 07-09, Las Vegas, NV and New York City, NY http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
AccessData® BootCamp Oct 14-16, Louisville, KY http://www.accessdata.com/common/pagedetail.aspx?PageCode=train Limited to Law Enforcement
Windows NT Operating System(NTOS) Oct 20-23, St. Louis, MO http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
EnCase® v6 Computer Forensics II Oct 21-24, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 EnScript® Programming - Phase I Oct 28-31, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData® Windows Forensics Oct 28-30, Manchester, United Kingdom http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
Macintosh Forensic Survival Course (MFSC) Nov 03-07, Bern, Switzerland http://www.forwarddiscovery.com/shop/index.php?act=viewCat&catId=3
Windows NT File System(NTFS) Nov 03-06, Meriden, CT http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
EnCase® v6 Computer Forensics II Nov 04-07, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData® BootCamp Nov 04-06, London, United Kingdom http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
AccessData® Internet Forensics Nov 04-06, St Paul, MN http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
AccessData® Windows Forensics Nov 04-06, Albany, NY http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
BlackBag Intermediate MacIntosh Forensics Nov 17-21, Washington D.C. http://www.blackbagtech.com/products/training.htm
EnCase® v6 Network Intrusion Investigations - Phase I Nov 18-21, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase® v6 Computer Forensics II Nov 25-28, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData® Internet Forensics Nov 25-27, Manchester, United Kingdom http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
Windows Internet Trace Evidence(INET) Dec 01-05, St. Louis, MO http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
AccessData® Windows Forensics Dec 02-04, Ft Lauderdale, FL; New York City, NY; and London, United Kingdom http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
Windows NT Operating System(NTOS) Dec 08-11, Meriden, CT http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
EnCase® v6 Computer Forensics II Dec 09-12, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData® Internet Forensics Dec 09-11, Dallas, TX and New York City, NY http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
AccessData® Windows Forensics Dec 09-11, Louisville, KY http://www.accessdata.com/common/pagedetail.aspx?PageCode=train Limited to Law Enforcement
EnCase® v6 Advanced Computer Forensics Dec 16-19, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData® BootCamp Dec 16-18, Manchester, United Kingdom http://www.accessdata.com/common/pagedetail.aspx?PageCode=train
**__2009 EVENTS__** _______2009_______
Linux File System for Computer Forensic Examiners(Linux) Jan 12-16, 2009, St. Louis, MO http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
Windows Internet Trace Evidence(INET) Jan 19-23, 2009, Meriden, CT http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
Linux File System for Computer Forensic Examiners(Linux) Mar 02-06, 2009, Meriden, CT http://www.nw3c.org/ocr/courses_desc.cfm Limited to Law Enforcement
Retrieved from "http://www.forensicswiki.org/w/index.php?title=Prefetch&oldid=7498"
Personal tools
Namespaces

Variants
Actions
Navigation:
About forensicswiki.org:
Toolbox