Weekly study6 hours
FTK Imager and Registry Viewer
Evaluate AccessData products and investigate Microsoft Windows systems
This course aims to give you the skills and knowledge you’ll need to install, configure and effectively use Forensic Toolkit (FTK), FTK Imager, Password Recovery Toolkit (PRTK) and Registry Viewer.
You’ll examine in detail standard data storage devices and common image formats, conduct forensic investigations on Microsoft Windows systems and learn where and how to locate system artifacts.
Finally, you’ll identify the techniques needed to assist in data recovery as you seek to qualify as an Accredited Certified Examiner® (ACE®), certified by digital forensics world leader, AccessData.
- Different data storage media types
- Acquisition tools
- Image formats
- Physical or logical drive
- FTK Imager interface
- FTK Imager functionality
Learning on this course
You can take this self-guided course and learn at your own pace. On every step of the course you can meet other learners, share your ideas and join in with active discussions in the comments.
What will you achieve?
By the end of the course, you‘ll be able to...
- Describe standard data storage devices
- Investigate common image formats
- Produce FTK Imager to perform a number of functions
Who is the course for?
This course is for learners who wish to better understand how to install and use Forensic Toolkit (FTK), FTK Imager, Password Recovery Toolkit (PRTK) and Registry Viewer, while working toward Accredited Certified Examiner® (ACE®) status from digital forensics world leader, AccessData.
Please note that the staff described in the ‘Who will you learn with?’ section below may be subject to change.