Training Provider for ILook Investigator Forensic Software
The mission of NW3C is to provide a nationwide support system for agencies involved in the prevention, investigation, and prosecution of economic and high-tech crimes and to support and partner with other appropriate entities in addressing homeland security initiatives, as they relate to economic and high-tech crimes.
Cybercop 202 - ILook Automated Forensic Application
This 4 1/2 day course serves as an overview of the most used features of ILook Investigator. It includes the IXImager to create a duplicate image of the hard disk and the examination of several hard drive partitions. The multiple aspects of this GUI-based forensic suite are presented with emphasis on imaging and processing of seized media. The student will walk through a case from previewing to the final reports and will be able to effectively conduct salvage, file signature analysis, registry analysis, hash analysis, deconstruction, keyword searches and more, on seized evidence. It does not teach basic forensics, but rather how to use the tool to perform forensic examinations. Many of the built in automated short cuts will be presented, which will assist in better case preparation and analysis. It is expected that the students already know forensic processing issues. This course requires the applicant to have previous training in Cybercop 101 (BDRA) or the equivalent and students MUST belong to a law enforcement agency.