Training

The Advanced Technical Security Products Training Course is a hands-on, two-day instructor-led course that covers the security landscape, basic Intrusion Prevention System (IPS) and Security Management System (SMS) installation, configuration and operation. It covers basic and advanced troubleshooting and diagnostics, focusing on commonly seen issues. Students will perform basic lab assignments in order to familiarize themselves with the user interface and common administrative tasks.
 

This course would certify that individual has a detailed working knowledge of Trend Micro Security Products. The TCSP (Trend Micro Certified Security Professional) certification can be achieved by an individual, by successfully completing the training and certification exams which comprise of five (5) Professional-level certification courses covering each of Trend Micro's core technologies:
 

1. Control Manager (TMCM)
2. OfficeScan (OSCE)
3. InterScan Message Security Suite (IMSS)
4. InterScan Web Security Suite (IWSS)
5. ScanMail for Exchange (SMEX)

This hands-on course is designed for investigators with strong computer skills, prior computer forensics training, and experience using the EnCase forensic software.  This course builds upon the skills covered in the EnCase Computer Forensics I course and enhances the examiner's ability to work efficiently through the use of the unique features of EnCase.

*Students must understand evidence handling; the structure of the evidence file; creating and using case files; data acquisition methods including DOS based, hardware write protected, crossover cable and disk to disk; recovering deleted files and folders in a FAT environment; keyword searches across logical and physical media; creating and using EnCase bookmarks; file signatures and signature analysis; and locating and understanding Windows artifacts.

Focusing on investigations common to the private sector, students will learn about the following:

• How to create and use of logical evidence files
• How to locate and recover deleted partitions and folders
• How to conduct keyword searches and advanced searches using GREP
• Students will gain an understanding of the EnCase Virtual File System (VFS) and Physical Disk Emulator (PDE)
• Students will learn about the Windows® Registry
• Students will learn how to deal with compound file types
• How to export files, directories and entire volumes
• How to identify files using hash values and building hash libraries
• How to identify Windows XP operating system artifacts such as link files, recycle bin, and user folders
• How to prepare reports and evidence for presentation in court
• How to recover artifacts such as swap files, file slack, and spooler files
• How to recover printed and faxed pages

Level:

Intermediate

Prerequisite:

Encase Computer Forensics I.  Advance preparation for this course is not required.

Who Should Attend?

This course is intended for IT security professionals, litigation support and forensic investigators.  Participants should have attended the EnCase Computer Forensics I.

CPE Credits:

32

This course would certify that individual has a detailed working knowledge of Trend Micro Security Products. The TCSP (Trend Micro Certified Security Professional) certification can be achieved by an individual, by successfully completing the training and certification exams which comprise of five (5) Professional-level certification courses covering each of Trend Micro's core technologies:
 

Control Manager (TMCM)
OfficeScan (OSCE)
InterScan Message Security Suite (IMSS)
InterScan Web Security Suite (IWSS)
ScanMail for Exchange (SMEX)