Course Overview
Forensic Data Recovery is the collection, preservation, analysis, and presentation of computer-related evidence. Computer evidence can be useful in criminal cases, civil litigation, and human resource and employment proceedings. Far more information is retained in a computer than most people realize. It's also more difficult to completely remove information than is generally thought. For these reasons, as well as others, computer forensic examinations can typically recover lost or deleted information (or at a minimum find evidence of the information) even when it has been intentionally deleted. Computer hard drive forensic examinations go far beyond normal data recovery techniques, probing areas and files on the media not normally accessed by untrained personnel. These examinations can locate whatever data a business, agency, or individual needs. Meanwhile for Anti-Forensic is a set of tools and techniques used as countermeasures for forensic analysis. Such techniques include data hiding, artefact wiping, disk cleaning utilities, file wiping utilities, disk degaussing/destruction techniques. This training course is designed to introduce the latest data recovery techniques and solutions. The training course would also offer counter countermeasures for forensic analysis.
Who Should Attend?
The course has been designed for IT personnel, administrators, computer support staffs and an end-user who are aware the importance of data in their storage. No previous repair or data recovery experience necessary. This training is intended to be introduced to the latest data recovery techniques and solutions. The Training Course would offer an excellent solution for Laptop / Desktop and External Hard Disk.
3-DaysTraining Course would offer an excellent solution for:
- Recovery of deleted hard drive files
- Crash/Corrupt operating system (Windows)
- Accidental Formatted of disks
- Virus Attack
- Partition loss or Corrupted
- Lost or Missing files and folders
- Email recovery. pst / .wab / .dbx / .mbx
- Password recovery (Workstation Win98/Vista/Win7/ Word/Excel/PDF )
- Delete/erase/wipe any file from any media easily and securely and none of the unerasers would bring it back
- Recover corrupted file from CD and DVD
- Repair corrupt Files after recover ( word/ excel/ pdf)
Training Methodology
Practical exercises combined with highly engaging activities will be used to reinforce learning objective. To highlight few of practical hands-on includes:
- Recover deleted files
- Recover data from CD / DVD
- Recover data from SD Card / MicroSD
- Recover data after MFT destroyed
- Recover data after Hard Disk has been formatted.
- Recover deleted Emails Outlook pst / .wab / .dbx / .mbx
- Recover Windows XP / Win 7 Admin Password
- Recover Windows Server Admin Password
- Recover Password (Words /Excel )
- Delete/erase/wipe any file from any media
- Delete/erase/wipe all data from any media and bring it back
- Anti-Forensic tools and techniques
Data Recovery – Schedule
Day 1 |
|
09.00am – 10.00am |
What is a file system?
|
10.00am – 10.30am |
Breakfast |
10.30am – 12.45pm |
Hard Disk as a Storage Device
File System on-Disk format
Indexing Methods
Data Area
|
12.45pm – 02.15pm |
Lunch |
02.15pm – 05.00pm |
Practical Exercises I |
Day 2 |
|
09.00am – 10.00am |
File System Weaknesses
|
10.00am – 10.30am |
Breakfast |
10.30am – 12.45pm |
Data Recovery
Practical Exercises II |
12.45pm – 02.15pm |
Lunch |
02.15pm – 05.00pm |
Practical Exercises III |
Day 3 |
|
09.00am – 10.00am |
Anti-Forensic Data Recovery Solution
|
10.00am – 10.30am |
Breakfast |
10.30am – 12.45pm |
Anti-Forensic Data Recovery Solution (Continue)
|
12.45pm – 02.15pm |
Lunch |
02.15pm – 05.00pm |
Practical Exercises V |