Digital Evidence AcquisitionForensic Imaging Training Course

WHY DATA SECURING & ACQUISITION?

Complete data acquisition is the foundation of every digital investigation. Get it wrong and you may alter, corrupt or lose the evidence your case depends on. Whether you are imaging a drive or trying to access and capture difficult to remove media from a portable device, the methods you use, the decisions you make and the processes you follow at the point of acquisition will define everything that follows.

This course teaches delegates how to perform sound, repeatable and legally defensible data acquisition across a range of storage media and device types. From write-blocked forensic imaging to hash verification and continuity documentation, every step is grounded in best practices and standards to ensure it is admissible.

Delegates will leave with the practical skills and confidence to acquire data correctly under investigation conditions — producing evidence that will stand up to scrutiny in court, at tribunals or in disciplinary proceedings and follow best practice.

WHO WILL BENEFIT

This course is designed for analysts and professionals who need to acquire digital data in a forensically sound manner. It is suitable for those new to forensic computing as well as practitioners who want to formalise or refresh their acquisition skills and ensure their methods meet current best practice standards.

• •Digital forensic examiners, forensic support staff and analysts
• •Law enforcement digital forensic units
• •Corporate and HR investigation teams
• •eDiscovery and incident response professionals
• •IT security and cyber teams handling evidence