Module 1

Course content

1. 1.(W00) Course Instructions

Module 2

Section 1: Introduction and Preparation

1. 1.(W10M01) INTRODUCTION AND INSTALLATION OF FTK IMAGER
2. 2.(W10M02) FTK Overview
3. 3.(W10M03) Preparing the Evidence Disk

Module 3

Section 2: Data Acquisition & Analysis

1. 1.(W10M04) Acquiring a Disk Image

Module 4

Analyzing the evidence

1. 1.(W10M05) Analyzing the Evidence
2. 2.(W10M06) Analyzing the Evidence - Step by step
3. 3.(W10M07) Evidence List and Examination Steps
4. 4.(W10M08) Evidence List and Examination Steps

Module 5

Creating a report

1. 1.(W10M09) Capturing the Registry with FTK Imager
2. 2.(W10M10) Assignment