• Online, Self-Paced
Course Description

This course is our first in a series introducing Evimetry for forensic data acquisitions. We start with the Evimetry Windows Controller interface and perform a basic full linear (bit-for-bit) acquisition directly from the Controller.

Learning Objectives

By the end of this course, students should be able to: Understand the basic layout of the Evimetry Windows Controller Differentiate Evidence drives vs. “Blessed” drives Understand how to perform a full linear, forensic acquisition with Evimetry Recognize the different options for performing allocated only, allocated and remainder, non-linear partial or live disk access.

Framework Connections

The materials within this course focus on the Knowledge Skills and Abilities (KSAs) identified within the Specialty Areas listed below. Click to view Specialty Area details within the interactive National Cybersecurity Workforce Framework.