Course list http://www.c-jump.com/bcc/

Step-by-Step EnCase Media Examination

  1. Case Management
  2. Case File
  3. Evidence File
  4. Creating a New Case
  5. Adding Evidence Files
  6. Check Acquisition MD5 Hash
  7. Initial Directory Structure
  8. Disk Geometry and Partitions
  9. Recovering Deleted Folders and Files
  10. Signature Analysis
  11. View File Signature Analysis Results
  12. Searching Unallocated Space
  13. Next Steps and The Search Warrant
  14. Time Zone Info
  15. Case Processor
  16. Case Processor - Time Zone Info
  17. Case Processor - Recovering Graphics
  18. Case Processor - Find Protected Files
  19. Case Processor - Windows History
  20. Search: Email
  21. Search: Email results - Records Conditions
  22. Search: Internet History
  23. Webmail
  24. Sweeping Bookmark
  25. Bookmarking Images
  26. Creating Reports
  27. Advanced: Disk Geometry Overview
  28. Advanced: Drive Size
  29. Advanced: Partition Information
  30. Advanced: Recovering Deleted Partition
  31. Advanced: Removing Recovered Partition
  32. Hash Library
  33. Hash Library Hierarchy
  34. Hash Set Category
  35. Hash Library Building Steps
  36. Encase 7 processing steps