Course Syllabus
This hands-on course focuses on the use of EnCase Enterprise to conduct investigations in a live network environment. Students will learn how to use EnCase Enterprise to address internal investigations and audits in a manner consistent with recognized standards. The class makes extensive use of the Encase Enterprise to emphasize the common skills needed to conduct forensic examinations. Many of the skills taught in this course are consistent with the forensic intermediate course but have been adapted to the network forensic environment. Delivery method: Group-Live.

The following topics and skills will be covered in this course. Students will:
- learn how to install and configure Secure Authentication for EnCase (SAFE).
- how data flows in the EnCase Enterprise environment.  The built-in security features of the product will be discussed. 
- how the administrtion of the SAFE, including the management of network nodes (clients) and Enterprise roles and users.
- learn how to deploy servlets to supported operating systems (Windows®, *nix, Mac).
- learn Enterprise-wide vs. "Ad-Hoc" servlet deployment methods and benefits.
- optimize network acquisitions in EnCase Enterprise v6 security.
- how Snapshot and the capture of volatile data can be used to gain a more complete picture of the status of a machine or machines during an incident investigation.
- how to understand the role of volatile data on netowrk investigations and security.
- how to use Snapshot to capture and analyze enterprise wide volatile data.
- how to create filters and conditions to streamline investigations of all kinds.
- utilize EnCase Enterprise for compromise assessment adn process analysis.
- how to automate the eDiscovery process using EnCase Enterprise.
- how EnCase Enterprise can rapidly identify and retain data across the network using a set of criteria provided by the examiner.
- the advanced use of the servlet and servlet deployment.
- how to prepare evidence for presentation in court.

FDR is the exclusive Canadian training partner for Guidance Software Inc., delivering all EnCase® training in Canada. FDR's team of Guidance Software Inc. EnCase Certified Examiner (EnCE)-certified instructors have trained hundreds of students, supporting their skill development in computer forensics and progression to obtain their EnCE designation.