Page 42 - C3 Master Training Catalog

P a g e | 42

TCFTP Basic Computer Evidence Recovery Training

Covers basic forensics topics including the following: Virtual Machines, BIOS,
Windows Operating Systems, Number Systems (Binary, Decimal,
Hexadecimal, Little Endian, Big Endian), Disk Structures, File Systems (FAT,
NTFS), RAIDs, Data Acquisition (Live Imaging, Dead-box Imaging, RAM
Capture, Volatile Data), Hashing, Encryption, Forensic Explorer, Axiom, and
Legal Issues.

Class Size: 24

Offerings: Twice a year

Locations: IRS Woodbridge, VA

Length of Training: Six (6) weeks