OFFICIAL CERTIFIED TRAINING
MAGNET FORENSICS TRAINING
AX200 Magnet AXIOM Examination
Magnet AXIOM Examinations (AX200) is ideal for those who require intermediate-level training with a digital investigation platform that covers cases involving smartphones, tablets, computers, and cloud data in a single collaborative interface. This course is the perfect entry point for examiners who are new to AXIOM. Course Syllabus |
ENCASE TRAINING
DF120 — Foundations in Digital Forensics with EnCase
This hands-on course involves practical exercises and real-life simulations in the use of OpenText™ EnCase™ software (EnCase). The class provides participants with an understanding of how EnCase may be used to examine data related to an incident response, an employee misconduct investigation, and/or a law enforcement criminal and/or civil investigation. Participants create cases using EnCase, configure the application to maximize its utilization, and learn evidence acquisition concepts and how to validate the data collected. Instruction progresses to the analysis of the data whether related to criminal investigations, cybersecurity incidents, or other matters. The course will cover techniques, such as keyword or indexed searching along with hash analysis. Participants will learn how to bookmark, export, and create reports relating to examination findings. The course concludes with instruction on archiving, validating the data, and restoring the case. Course Syllabus |
DF210 - Building an Investigation with EnCase
This hands-on course is designed for investigators with strong computer skills, prior computer forensics training, and experience using the OpenText™ EnCase™ software (EnCase). This course builds upon the skills covered in the DF120–Foundations in Digital Forensics course and enhances the examiner's ability to work efficiently using the unique features of EnCase. During this course, students will build an investigation using analysis techniques, such as recovering deleted volumes, registry analysis, Recycle Bin examination, and examining compound files. Other analysis techniques, such as searching unallocated clusters, parsing current Windows artifacts, examining email and Internet artifacts, and analyzing USB device artifacts will be included. Course Syllabus |
DF320 - Advanced Analysis of Windows Artifacts with EnCase
This hands-on course is designed for examiners with solid computer skills, seeking to learn advanced concepts in analyzing Windows artifacts. The participants will be provided instruction that includes parsing and analysis techniques on registry data, volume shadow service, random access memory, zip file structures, prefetch, and SQLite content. Course Syllabus |
AMPED FIVE TRAINING
FORENSIC IMAGE AND VIDEO ENHANCEMENT
The course is a mixture of lecture and hands-on with many practical exercises to solve cases using Amped FIVE. Besides showing how to use the software, we will cover the basics of image and video generation, processing, and enhancement, with a focus on surveillance footage. We will also highlight the most common pitfalls that users may encounter in their casework. View schedule |
ADVANCED IMAGE AND VIDEO ANALYSIS
Due to the speed of development at Amped Software, it has been identified that within 12 - 18 months, a user may require a 'top up' to their training. During this refresher course, we'll look at advanced techniques and concepts for some of the original filters, such as Aspect Ratio Correction and Photogrammetry. We will also cover the advanced use of Presentation filters to deliver compelling results. The course is designed on a modular system, allowing a bespoke personalized schedule dependent on when the original training was received. View schedule |
AMPED AUTHENTICATE TRAINING
PHOTO ANALYSIS AND TAMPERING DETECTION
The course is a mixture of lecture and hands-on. After presenting the concepts of integrity and authenticity, the course explains the image generation pipeline and how artifacts are introduced during generation and manipulation of imagery. Then, it shows how Amped Authenticate builds on such artifacts to unveil the processing history of images and videos; this includes analyzing the integrity, the authenticity, and the source device of the examined content. View schedule |
INVESTIGATING VIDEO EVIDENCE TRAINING
INTRODUCTION TO VIDEO EVIDENCE FOR INVESTIGATORS
The course is a mixture of lectures and hands-on with practical or simulated cases using Amped Replay. We will focus on implementing a firm legal process for using and reporting on image and video evidence in daily investigations. This course has the purpose to provide students with the theory and the basics of image processing, understand the issues affecting images and videos in an investigative context and deliver in-depth knowledge of all software features to solve those issues, including the technical and scientific background behind the implemented techniques. View schedule |