Difference between pages "Palm" and "Training Courses and Providers"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(I added information about Paraben's PDA Seizure)
 
m
 
Line 1: Line 1:
__TOC__
+
This is the list of Training Providers, who offer training courses of interest to practitioners and researchers in the field of Digital Forensics.  Conferences which may include training are located on the [[Upcoming_events]] page. 
  
=Overview=
+
<b>PLEASE READ BEFORE YOU EDIT THE LIST BELOW</b><br>
 +
Some training providers offer on-going training courses that are available in an on-line "any time" format. Others have regularly scheduled training that is the same time each month.  Others have recurring training but are scheduled at various times throughout the year. Providers training courses should be listed in alphabetical order, and should be listed in the appropriate section.  Non-Commercial training is typically offered by governmental agencies or organizations that directly support law enforcement.  Tool Vendor training is training offered directly by a specific tool vendor, which may apply broadly, but generally is oriented to the vendor's specific tool (or tool suite).  Commercial Training is training offered by commercial companies which may or may not be oriented to a specific tool/tool suite, but is offered by a company other than a tool vendor.
  
A "Palm" is a commonly referred to as a small-scale (hand-held) computer that runs Palm's PalmOS software.
+
<i>Some training opportunities may be <u>limited</u> to <b>Law Enforcement Only</b> or to a specific audience.  Such restrictions should be noted when known.</i>
 +
== On-going / Continuous Training ==
 +
{| border="0" cellpadding="2" cellspacing="2" align="top"
 +
|- style="background:#bfbfbf; font-weight: bold"
 +
! width="40%"|Title
 +
! width="20%"|Date/Location
 +
! width="40%"|Website
 +
|-
 +
|- style="background:pink;align:left"
 +
! DISTANCE LEARNING
 +
|-
 +
|Basic Computer Examiner Course - Computer Forensic Training Online
 +
|Distance Learning Format
 +
|http://www.cftco.com
 +
|-
 +
|Linux Data Forensics Training
 +
|Distance Learning Format
 +
|http://www.crazytrain.com/training.html
 +
|-
 +
|SANS On-Demand Training
 +
|Distance Learning Format
 +
|http://www.sans.org/ondemand/?portal=69456f95660ade45be29c00b0c14aea1
 +
|-
 +
|Champlain College - CCE Course
 +
|Online / Distance Learning Format
 +
|http://extra.champlain.edu/cps/wdc/alliances/cce/landing/
 +
|-
 +
|Las Positas College
 +
|Online Computer Forensics Courses
 +
|http://www.laspositascollege.edu
 +
|-
 +
|- style="background:pink;align:left"
 +
!RECURRING TRAINING
 +
|-
 +
|MaresWare Suite Training
 +
|First full week every month<br>Atlanta, GA
 +
|http://www.maresware.com/maresware/training/maresware.htm
 +
|-
 +
|Evidence Recovery for Windows Vista&trade;
 +
|First full week every month<br>Brunswick, GA
 +
|http://www.internetcrimes.net
 +
|-
 +
|Evidence Recovery for Windows Server&reg; 2003 R2
 +
|Second full week every month<br>Brunswick, GA
 +
|http://www.internetcrimes.net
 +
|-
 +
|Evidence Recovery for the Windows XP&trade; operating system
 +
|Third full week every month<br>Brunswick, GA
 +
|http://www.internetcrimes.net
 +
|-
 +
|Computer Forensics Training and CCE&trade; Testing for Litigation Support Professionals
 +
|Third weekend of every month(Fri-Mon)<br>Dallas, TX
 +
|http://www.md5group.com
 +
|-
 +
|}
 +
==NON-COMMERCIAL TRAINING==
 +
{| border="0" cellpadding="2" cellspacing="2" align="top"
 +
|- style="background:#bfbfbf; font-weight: bold"
 +
! width="40%"|Title
 +
! width="40%"|Website
 +
! width="20%"|Limitation
 +
|-
 +
|Defense Cyber Investigations Training Academy (DCITA)
 +
|http://www.dc3.mil/dcita/dcitaAbout.php
 +
|Limited To Certain Roles within US Government Agencies[http://www.dc3.mil/dcita/dcitaRegistration.php (1)]
 +
|-
 +
|Federal Law Enforcement Training Center
 +
|http://www.fletc.gov/training/programs/technical-operations-division
 +
|Limited To Law Enforcement
 +
|-
 +
|MSU National Forensics Training Center
 +
|http://www.security.cse.msstate.edu/ftc
 +
|Limited To Law Enforcement
 +
|-
 +
|IACIS
 +
|http://www.iacis.com/training/course_listings
 +
|Limited To Law Enforcement and Affiliate Members of IACIS
 +
|-
 +
|SEARCH
 +
|http://www.search.org/programs/hightech/courses/
 +
|Limited To Law Enforcement
 +
|-
 +
|National White Collar Crime Center
 +
|http://www.nw3c.org/ocr/courses_desc.cfm
 +
|Limited To Law Enforcement
 +
|-
 +
|}
  
The Palm OS platform is an open architecture that provides a basis for third-party developers and original equipment manufacturers (OEMs) to create mobile computing solutions. The platform consists of five components:<br><br>
+
==TOOL VENDOR TRAINING==
* The reference hardware design<br>
+
{| border="0" cellpadding="2" cellspacing="2" align="top"
* The device operating system called the Palm OS software<br>
+
|- style="background:#bfbfbf; font-weight: bold"
* The HotSync conduit data synchronization technology<br>
+
! width="40%"|Title
* The platform component tools including an applications programming interface (API) that enables developers to write applications<br>
+
! width="40%"|Website
* The software interface capabilities to support hardware add-ons<br>
+
! width="20%"|Limitation
 +
|-
 +
|AccessData (Forensic Tool Kit FTK)
 +
|http://www.accessdata.com/courses.html
 +
|-
 +
|ASR Data (SMART)
 +
|http://www.asrdata.com/training/
 +
|-
 +
|ATC-NY (P2P Marshal, Mac Marshal)
 +
|http://p2pmarshal.atc-nycorp.com/index.php/training http://macmarshal.atc-nycorp.com/index.php/training
 +
|-
 +
|BlackBag Technologies (Mac Forensic Tools- BlackLight and SoftBlock)
 +
|https://www.blackbagtech.com/training.html
 +
|-
 +
|Cellebrite (UFED)
 +
|http://www.forwarddiscovery.com
 +
|-
 +
|CPR Tools (Data Recovery)
 +
|http://www.cprtools.net/training.php
 +
|-
 +
|Digital Intelligence (FRED Forensics Platform)
 +
|http://www.digitalintelligence.com/forensictraining.php
 +
|-
 +
|e-fense, Inc. (Helix3 Pro)
 +
|http://www.e-fense.com/training/index.php
 +
|-
 +
|Guidance Software (EnCase)
 +
|http://www.guidancesoftware.com/computer-forensics-training-courses.htm
 +
|-
 +
|Micro Systemation (XRY)
 +
|http://www.msab.com/training/
 +
|-
 +
|Nuix (eDiscovery)
 +
|http://www.nuix.com.au/eDiscovery.asp?active_page_id=147
 +
|-
 +
|Paraben (Paraben Suite)
 +
|http://www.paraben-training.com/training.html
 +
|-
 +
|Software Analysis & Forensic Engineering (CodeSuite)
 +
|http://www.safe-corp.biz/training.htm
 +
|-
 +
|Technology Pathways(ProDiscover)
 +
|http://www.techpathways.com/DesktopDefault.aspx?tabindex=6&tabid=9
 +
|-
 +
|SubRosaSoft (MacForensicsLab)
 +
|http://www.macforensicslab.com/ProductsAndServices/index.php?main_page=index&cPath=2
 +
|-
 +
|WetStone Technologies (Gargoyle, Stego Suite, LiveWire Investigator)
 +
|https://www.wetstonetech.com/trainings.html
 +
|-
 +
|X-Ways Forensics (X-Ways Forensics)
 +
|http://www.x-ways.net/training/
 +
|-
 +
|}
  
(http://www.palm.com/us/company/pr/2000/092000.html, 2000)
+
==COMMERCIAL TRAINING==
 
+
{| border="0" cellpadding="2" cellspacing="2" align="top"
 
+
|- style="background:#bfbfbf; font-weight: bold"
== History ==
+
! width="40%"|Title
 
+
! width="40%"|Website
Palm Computing was founded by Jeff Hawkins, Donna Dubinsky and Ed Colligan.  The original purpose of the company was to create handwriting recognition software for other devices (Graffiti).  The initial idea for the devices came from Hawkins' habit of carrying a block of wood in his pocket.
+
! width="20%"|Limitation
 
+
|-
The initial Palm device released in 1996 was called the Pilot.  Because Pilot Pen Corporation brought forth a trademark infrigement case, the second generation device released in 1997 was named the PalmPilot. 
+
|BerlaCorp iOS and GPS Forensics Training
 
+
|http://www.berlacorp.com/training.html
The Palm was not the original PDA device released, but benefited from the failure of Apple's Newton. 
+
|-
 
+
|Computer Forensic Training Center Online (CFTCO)
The Palm OS initially featured personal information management (PIM) tools such as Calendar, Contacts, Memo Pad, Expense and Tasks.  As later versions were released, more features were added.  Here is a list of various Palm OS releases:
+
|http://www.cftco.com/
 
+
|-
*  Version 3.1, 3.3, 3.5
+
|CCE Bootcamp
Added support for color, multiple expansion ports, new processors, etc.
+
|http://www.cce-bootcamp.com/
 
+
|-
*  Version 4.0
+
|Dera Forensics Group
Added a standard interface for external FS access
+
|http://www.deraforensicgroup.com/courses.htm
 
+
|-
*  Version 5.0
+
|e-fense Training
First version to support Acorn Risc Machine (ARM) devices. Later versions which included OS 5.2, featured Graffiti 2. It began the separation of Palm OS and Palm One.
+
|http://www.e-fense.com/training/index.php
 
+
|-
Presently, version 6.1 of the Palm OS is under development (Cobalt).  Cobalt features a Linux-based kernel.  There are presently no devices released using Palm OS 6.
+
|Forward Discovery, Inc.
 
+
|http://www.forwarddiscovery.com
=Features=
+
|-
<table>
+
|H-11 Digital Forensics
<tr>
+
|http://www.h11-digital-forensics.com/training/viewclasses.php
<td>'''Address Book''': Allows the user to keep track of their contacts. Synchronized via HotSync manager</td>
+
|-
</tr>
+
|High Tech Crime Institute
<tr>
+
|http://www.gohtci.com
<td>'''Calculator''': Basic 4 function calculator</td>
+
|-
</tr>
+
|Hoffmann Advanced Forensic Sessions
<tr>
+
|http://en.hoffmannbv.nl/index.cfm/t/Hoffmann_Advanced_Forensic_Sessions/vid/990B3B29-FD6A-6F79-58B3C841381DB7AF
<td>'''Datebook''': Track appointments, birthdates and other important times during the year. Synchronized via HotSync manager</td>
+
|-
</tr>
+
|Infosec Institute
<tr>
+
|http://www.infosecinstitute.com/courses/security_training_courses.html
<td>'''Expenses''': Keep track of your spending habits.</td>
+
|-
</tr>
+
|Intense School (a subsidiary of Infosec Institute)
<tr>
+
|http://www.intenseschool.com/schedules
<td>'''HotSync''': Application that ran on your desktop or portable PC or Mac to allow for calendars and contacts to easily be synchronized with Palm device.</td>
+
|-
</tr>
+
|ManTech Computer Security Training
<tr>
+
|http://www.mantech.com/capabilities/comptraining.asp
<td>'''Memo Pad''': Write short notes.</td>
+
|-
</tr>
+
|Mobile Forensics, Inc
<tr>
+
|http://mobileforensicsinc.com/
<td>'''Note Pad''': Scribble notes in your natural writing language.</td>
+
|-
</tr>
+
|NID Forensics Academy (Certified Digital Forensic Investigator - CDFI Program)
<tr>
+
|http://www.nidforensics.com.br/
<td>'''To Do List''': Create a check list of items to accomplish.   Synchronized via HotSync manager.</td>
+
|-
</tr>
+
|NTI (an Armor Forensics Company)
<tr>
+
|http://www.forensics-intl.com/training.html
<td>'''Palm Photos''': Photo manager that allows sharing of photos between multiple palm devices.</td>
+
|-
</tr>
+
|Security University
</table>
+
|http://www.securityuniversity.net/classes.php
 
+
|-
==Palm Pilot==
+
|Steganography Analysis and Research Center (SARC)
 
+
|http://www.sarc-wv.com/training.aspx
==3Com Audrey==
+
|-
 
+
|Sumuri - Forensics Simplified
The 3Com Audrey was created to be a kitchen computer in 2000-2001. It was a mainly a used to access the Internet.  Cisco then bought out 3Com and the Audrey was no more.  One noticeable aspect of the Audrey is how people can hack it.  They have turned it into anything from a web server to a chatting client.  It runs QNX with PalmOS extensions.  This allows it to be hacked extremely easily.
+
|http://sumuri.com/
 
+
|-
It runs on the Intel-compatible Cyrix-MediaGX processor. It uses Palm's HotSync technology to update the address book and date book with up to two Palms simultaneously.  It uses a USB Ethernet controller to connect to the Internet.  It also has built-in stereo speakers to play digital and streaming music. You can either use the clear pen to input data, or pull out the wireless keyboard.  No graffiti is used.
+
|SysAdmin, Audit, Network, Security Institute (SANS)
 
+
|http://computer-forensics.sans.org/course/
It was discontinued on March 21, 2001. However, there is still an Audrey frenzy going on today.
+
|-
 
+
|Teel Technologies Mobile Device Forensics Training
==Fossil==
+
|http://www.teeltech.com/tt3/training.asp
 
+
|-
==Garmin==
+
|Zeidman Consulting (MCLE)
 
+
|http://www.zeidmanconsulting.com/speaking.htm
==Kyocera==
+
|-
 
+
|}
Kyocera acquired QUALCOMM Incorporated's Code Division Multiple Access (CDMA) wireless phone business in February 2000 and incorporates QUALCOMM's CDMA technology in the development and manufacture of wireless phones. An agreement with Palm Inc. to license the Palm OS platform was reached by Kyocera and Palm after QUALCOMM's acquisition. It is the foundation for a suite of smartphones.
+
 
+
==QualComm==
+
 
+
In September 1998, QUALCOMM introduced the pdQ smartphone which was the first CDMA digital wireless phone to integrate the Palm OS software. QUALCOMM’s CDMA handset business was later bought by Kyocera in February 2000.
+
 
+
==Samsung==
+
 
+
==Sony Cli&Egrave;==
+
 
+
==Symbol==
+
 
+
==TapWave==
+
 
+
==TRG==
+
 
+
==Handspring Visor==
+
 
+
The original creators of the PalmPilot, Jeff Hawkins, Donna Dubinsky, and Ed Colligan, left Palm Computing after desputes with the parent company 3com. As a result, the trio founded Handspring in 1998. The first product released in 1999 was called the Handspring Visor, a clone of the original PalmPilot with minor additions, that used the newly created Palm OS. One of it's most prominent features was USB support and an expansion slot for memory cards, both of which were not yet popular at the time.
+
 
+
The Visor line includes:
+
<ul>
+
<li>Visor and Visor Deluxe</li>
+
<li>Visor Prism</li>
+
<li>Visor Platinum</li>
+
<li>Visor Edge</li>
+
<li>Visor Neo</li>
+
<li>Visor Pro</li>
+
</ul>
+
 
+
==Treo==
+
Treo manufacturers a variety of devices, including the LifeDrive, Treo 650 and 700w, Palm Z22 and Tx, and the Tungsten E2. Each of these devices is marketed at a different segment of the market. For example, the LifeDrive contains a 4GB integrated hard drive and is advertised as a portable multimedia device that plays videos and MP3s.  The LifeDrive Also includes integrated WiFi and Bluetooth capabilities. The Treo 650 and 700w are the company's Smartphones.  The Treo 650 runs Palm OS, while the 700w runs on Windows Mobile.  The Z22, Tx, and Tungsten E2 are primarily designed to be personal organizers.
+
 
+
=Forensics=
+
Forensics for Palm devices is a nascent field. There are several tools available for the image acquisition and analysis of Palm devices.
+
 
+
==EnCase==
+
EnCase, published by Guidance Software, is a complete cyber forensics software package that handles all steps of the investigative process, from the acquisition to the report creation.  The software includes built-in capabilities for performing MD5 hashing, data carving, deleted file recovery, and many other functions.
+
 
+
Although traditionally relegated to the realm of desktop computer forensics investigations, EnCase does support the acquisition and analysis of a limited number of Palm devices.  
+
 
+
==Paraben==
+
Paraben has a software application that is specifically designed for PDA forensics,PDA Seizure. This comprehensive tool allows PDA data to be acquired, viewed, and reported on, all within a Windows environment. The software comes equiped with quite a few key features. These features include the ability to encrypt saved case files, Blackberry OS support, built-in recovery of Palm passwords, enhanced viewing on file data, complete physical and logical acquisition for Palm PDA devices, and many more. It has a few draw backs, in that some of the material acquired from the PDAs is hard to interpret by a person that is not computer savi. Although, on the other hand it has features like a search portion that allows you to enter a search term and PDA Seizure will bring up all files that have that term in them.  This allows the investigator to look for case specific information easily and quickly.
+
 
+
=References=
+
http://www.answers.com/topic/palm-os
+
 
+
http://www.palm.com/us/
+
 
+
http://www.encase.com
+
 
+
http://www.paraben.com
+

Revision as of 15:04, 11 March 2011

This is the list of Training Providers, who offer training courses of interest to practitioners and researchers in the field of Digital Forensics. Conferences which may include training are located on the Upcoming_events page.

PLEASE READ BEFORE YOU EDIT THE LIST BELOW
Some training providers offer on-going training courses that are available in an on-line "any time" format. Others have regularly scheduled training that is the same time each month. Others have recurring training but are scheduled at various times throughout the year. Providers training courses should be listed in alphabetical order, and should be listed in the appropriate section. Non-Commercial training is typically offered by governmental agencies or organizations that directly support law enforcement. Tool Vendor training is training offered directly by a specific tool vendor, which may apply broadly, but generally is oriented to the vendor's specific tool (or tool suite). Commercial Training is training offered by commercial companies which may or may not be oriented to a specific tool/tool suite, but is offered by a company other than a tool vendor.

Some training opportunities may be limited to Law Enforcement Only or to a specific audience. Such restrictions should be noted when known.

On-going / Continuous Training

Title Date/Location Website
DISTANCE LEARNING
Basic Computer Examiner Course - Computer Forensic Training Online Distance Learning Format http://www.cftco.com
Linux Data Forensics Training Distance Learning Format http://www.crazytrain.com/training.html
SANS On-Demand Training Distance Learning Format http://www.sans.org/ondemand/?portal=69456f95660ade45be29c00b0c14aea1
Champlain College - CCE Course Online / Distance Learning Format http://extra.champlain.edu/cps/wdc/alliances/cce/landing/
Las Positas College Online Computer Forensics Courses http://www.laspositascollege.edu
RECURRING TRAINING
MaresWare Suite Training First full week every month
Atlanta, GA
http://www.maresware.com/maresware/training/maresware.htm
Evidence Recovery for Windows Vista™ First full week every month
Brunswick, GA
http://www.internetcrimes.net
Evidence Recovery for Windows Server® 2003 R2 Second full week every month
Brunswick, GA
http://www.internetcrimes.net
Evidence Recovery for the Windows XP™ operating system Third full week every month
Brunswick, GA
http://www.internetcrimes.net
Computer Forensics Training and CCE™ Testing for Litigation Support Professionals Third weekend of every month(Fri-Mon)
Dallas, TX
http://www.md5group.com

NON-COMMERCIAL TRAINING

Title Website Limitation
Defense Cyber Investigations Training Academy (DCITA) http://www.dc3.mil/dcita/dcitaAbout.php Limited To Certain Roles within US Government Agencies(1)
Federal Law Enforcement Training Center http://www.fletc.gov/training/programs/technical-operations-division Limited To Law Enforcement
MSU National Forensics Training Center http://www.security.cse.msstate.edu/ftc Limited To Law Enforcement
IACIS http://www.iacis.com/training/course_listings Limited To Law Enforcement and Affiliate Members of IACIS
SEARCH http://www.search.org/programs/hightech/courses/ Limited To Law Enforcement
National White Collar Crime Center http://www.nw3c.org/ocr/courses_desc.cfm Limited To Law Enforcement

TOOL VENDOR TRAINING

Title Website Limitation
AccessData (Forensic Tool Kit FTK) http://www.accessdata.com/courses.html
ASR Data (SMART) http://www.asrdata.com/training/
ATC-NY (P2P Marshal, Mac Marshal) http://p2pmarshal.atc-nycorp.com/index.php/training http://macmarshal.atc-nycorp.com/index.php/training
BlackBag Technologies (Mac Forensic Tools- BlackLight and SoftBlock) https://www.blackbagtech.com/training.html
Cellebrite (UFED) http://www.forwarddiscovery.com
CPR Tools (Data Recovery) http://www.cprtools.net/training.php
Digital Intelligence (FRED Forensics Platform) http://www.digitalintelligence.com/forensictraining.php
e-fense, Inc. (Helix3 Pro) http://www.e-fense.com/training/index.php
Guidance Software (EnCase) http://www.guidancesoftware.com/computer-forensics-training-courses.htm
Micro Systemation (XRY) http://www.msab.com/training/
Nuix (eDiscovery) http://www.nuix.com.au/eDiscovery.asp?active_page_id=147
Paraben (Paraben Suite) http://www.paraben-training.com/training.html
Software Analysis & Forensic Engineering (CodeSuite) http://www.safe-corp.biz/training.htm
Technology Pathways(ProDiscover) http://www.techpathways.com/DesktopDefault.aspx?tabindex=6&tabid=9
SubRosaSoft (MacForensicsLab) http://www.macforensicslab.com/ProductsAndServices/index.php?main_page=index&cPath=2
WetStone Technologies (Gargoyle, Stego Suite, LiveWire Investigator) https://www.wetstonetech.com/trainings.html
X-Ways Forensics (X-Ways Forensics) http://www.x-ways.net/training/

COMMERCIAL TRAINING

Title Website Limitation
BerlaCorp iOS and GPS Forensics Training http://www.berlacorp.com/training.html
Computer Forensic Training Center Online (CFTCO) http://www.cftco.com/
CCE Bootcamp http://www.cce-bootcamp.com/
Dera Forensics Group http://www.deraforensicgroup.com/courses.htm
e-fense Training http://www.e-fense.com/training/index.php
Forward Discovery, Inc. http://www.forwarddiscovery.com
H-11 Digital Forensics http://www.h11-digital-forensics.com/training/viewclasses.php
High Tech Crime Institute http://www.gohtci.com
Hoffmann Advanced Forensic Sessions http://en.hoffmannbv.nl/index.cfm/t/Hoffmann_Advanced_Forensic_Sessions/vid/990B3B29-FD6A-6F79-58B3C841381DB7AF
Infosec Institute http://www.infosecinstitute.com/courses/security_training_courses.html
Intense School (a subsidiary of Infosec Institute) http://www.intenseschool.com/schedules
ManTech Computer Security Training http://www.mantech.com/capabilities/comptraining.asp
Mobile Forensics, Inc http://mobileforensicsinc.com/
NID Forensics Academy (Certified Digital Forensic Investigator - CDFI Program) http://www.nidforensics.com.br/
NTI (an Armor Forensics Company) http://www.forensics-intl.com/training.html
Security University http://www.securityuniversity.net/classes.php
Steganography Analysis and Research Center (SARC) http://www.sarc-wv.com/training.aspx
Sumuri - Forensics Simplified http://sumuri.com/
SysAdmin, Audit, Network, Security Institute (SANS) http://computer-forensics.sans.org/course/
Teel Technologies Mobile Device Forensics Training http://www.teeltech.com/tt3/training.asp
Zeidman Consulting (MCLE) http://www.zeidmanconsulting.com/speaking.htm