Data Storage Foundations – Certification Course (Live Remote) – June 2025
4-day Intermediate Course
Course Overview
Embark on a comprehensive exploration of data recovery and analysis with our intensive five-day course tailored for examiners tasked with deciphering electronic evidence. Beginning with an examination of volatile data recovery techniques, including RAM analysis fundamentals, participants delve into early modules designed to build a solid foundation. This is complemented by an in-depth exploration of the Microsoft New Technology File System (NTFS) and the exFAT file systems, unraveling their architecture, functionality, and directory entry information intricacies.
Throughout the course, attendees gain invaluable insights into the formatting process, system areas functionality, file data management, and directory entry metadata, crucial for locating and understanding stored data. Forensically relevant areas are scrutinized meticulously, alongside techniques for identifying potential evidence pivotal for advanced examinations.
Building upon this foundational knowledge, participants delve deeper into forensic artifacts within modern Windows environments. Advanced Windows Registry examination, introduction to SQLite databases, and recovery of deleted files are among the topics covered, aligning with user activity artifacts. The course emphasizes the direct correlation between File System and Operating System Application functions, shedding light on Distributed Link Tracking services, Windows 10 Timeline function, and other Operating System-related artifacts.
Hands-on labs and student exercises provide practical application of acquired knowledge, utilizing a diverse array of open-source and leading forensic applications. Through immersive experiences, participants hone their skills in examining key artifacts, fostering a deeper understanding of data recovery and analysis methodologies.
By the course’s conclusion, attendees emerge equipped with advanced forensic capabilities and a nuanced understanding of electronic evidence recovery and analysis, poised to navigate complex digital landscapes with confidence and precision.
What is Live Remote Synchronous Training?
Remote Synchronous Training (RST) allows the attendee to participate in structured training courses remotely, in the comfort of your own office. It eliminates travel costs and provides a fully interactive environment, just like being in the classroom! RST delivery is specifically designed to simulate a live learning environment. Students have two-way communication with the instructor as well as the other students in the class using a typical hardware setup from their remote location. Instructors can monitor and interact with all students at the same time. When needed, instructors can assist students by physically interacting with his/her assigned machine in the Spyder Forensics remote classroom.
Why choose a Remote class?
Content is delivered exactly the same as in our live classes · Full interaction with the trainer and other course attendees · No travel costs and enjoy the class at your preferred location · Receive the same courseware as an in-person class, i.e. page color printed student manual for post class reference, USB with datasets and student files · Use of unique datasets developed by Spyder Forensics covering all artifacts covered in this class and others in our curriculum · Post class access the Spyder Forensics Academy (LMS) for supplementary courseware and online electronic version of the training manual
What you will need:
A computer (Windows or Apple) connected to the internet allowing access to GoToTraining™ for instructor delivery and Splashtop Streamer to interact with the remote classroom PC · A microphone to interact via voice with the class (not required as Chat window is always available) · Speakers to hear the class being delivered · Preferred 2 monitors to open multiple windows (GoToTraining and Splashtop windows)
What you will receive:
Printed course manual · Student USB · Access to the Spyder Forensics Academy · Course certificate