OpenText EnCase - Administration Training Course and Workshop in Bangalore, Mysore, Chennai, Hyderabad, Pune, Mumbai, Delhi, Noida, Gurgaon, Kolkata

The OpenText EnCase - Administration training course addresses the administration and implementation of OpenText EnCase Forensic and OpenText EnCase Endpoint Investigator. This course presents proper management of EnCase Forensic and Endpoint Investigator licensing, appropriate configuration of the SAFE (Secure Authentication for EnCase), and efficient deployment of agents, which allows time-saving communication back to the SAFE and the investigator. The class also provides step-by-step instructions for the life cycle of a case without working on actual case data to focus on the best practices of creation, naming, storage, archiving cases and evidence.

By attending OpenText EnCase - Administration workshop, delegates will learn:

Installing, configuring, and upgrading EnCase Forensic and EnCase Endpoint Investigator.
Creating and managing electronic licenses.
Installing and configuring the EnCase SAFE (Secure Authentication for EnCase).
Deploying the EnCase Agent to endpoints.
Administering and preserving components of EnCase, such as global settings, case templates, and configuration files.
Managing files supporting EnCase operations, including public and private keys, conditions, EnScript programs, hash libraries, external programs, and portable applications.
How to bookmark notable data and build a comprehensive case report.
Creating custom pathways to facilitate workflow management.

Attending a training on OpenText EnCase Digital Forensics - Essentials is recommended

The OpenText EnCase - Administration class is ideal for:

New and experienced users of EnCase Forensic or EnCase Endpoint Investigator.

Day 1

Getting familiar with EnCase Endpoint Investigator software, its component parts and licensing
Logging into the SAFE server for the first time, including troubleshooting steps
Configuring the SAFE server with regard to the EnCase Endpoint Investigator Enhanced Agent, network layout, roles and users
Learning local and remote installation of the EnCase Endpoint Investigator agent
Previewing and acquiring remote disks, volumes, logical data (files and folders) and physical memory
Using the EnCase Endpoint Investigator Sweep Enterprise function to capture volatile data (running processes, open ports, etc.) and how to identify and retrieve target files based on hash values or file system metadata

Day 2

Practicing basic EnCase Endpoint Investigator navigation, including viewing, sorting, selecting and tagging files, folders and other items in the case
Determining file type using file extensions and file signature analysis
Viewing the internal structure of archive and other supported compound file types
Using the Evidence Processor to identify internet artifacts
Creating custom conditions to filter data
Performing raw and indexed keyword searching-also using EnScript applications to perform hybrid keyword searches (searching the raw data of some evidence-items and transcript data of others)

Day 3

Exporting and printing report data for individual evidence items
Extracting tabular data into PDF, HTML, XML, text and other supported formats
Understanding case and report templates
Bookmarking case information, examination notes, the structure of folders, evidence items (files, internet artifacts, etc.), raw text, decoded data, transcript data, keyword hits and tabular data
Moving and ordering bookmark and bookmark folders to create the final case report
Using the Triage Report function

Encarta Labs Advantage

One Stop Corporate Training Solution Providers for over 6,000 various courses on a variety of subjects
All courses are delivered by Industry Veterans
Get jumpstarted from newbie to production ready in a matter of few days

Trained more than 50,000 Corporate executives across the Globe
All our trainings are conducted in workshop mode with more focus on hands-on sessions

OpenText EnCase - Administration

COURSE AGENDA

Day 1

Day 2

Day 3

Encarta Labs Advantage