NTI - Data Imaging Course

One Day Data Imaging Course

By request at your location or in Gresham, Oregon

Since 1996, NTI has been training corporate, government and law enforcement computer specialists in the field of Computer Forensics. Our 5 Day Computer Forensics Training Course has become very popular and it deals primarily with computer security, computer incident responses and computer evidence issues tied to DOS, Windows, Windows 95 and Windows 98 computer systems. The last two days of the training course address issues specific to the Windows NT family of operating systems (including Windows 2000 and Windows XP).

This One Day Data Imaging Course deals specifically with issues related to creating evidence grade bit stream copies of computer hard disk drives that may contain electronic evidence. The course was created by Sean Barry who has provided technical support to law enforcement computer crime specialists on bit stream backup issues for several years here at NTI.

Computer evidence is very fragile and can easily and unintentionally be altered, modified or destroyed, through normal computer use or even just turning on the subject computer. Preserving all computer data is essential to any investigation, whether or not it is headed to the court room. Therefore, it is important that only properly trained computer evidence specialists, using software they have tested to be forensically sound, perform the bit stream backup process. Since computer forensics examinations are performed on restored bit stream images of the original media, the imaging process is considered the most important step in processing computer evidence.

This course is technical and is intended for individuals who are already computer experts. Unique computer hardware and software issues are involved in the creation of an evidence grade bit stream backup and this course deals with both hardware and software issues. As with NTI's other training courses, this course is restricted to law enforcement, military, government, Fortune 1000 and Big 4 Accounting firm clients. It is not open to the general public because this technology can be used for both good and evil purposes. Significant discounts are also provided to law enforcement and US military computer specialists to help deal with limited funding issues.

This hands-on course covers the following important issues:

The Importance of Making Accurate Bit Stream Backups.

Hardware and BIOS Issues that pertain to success or failure.

Jumper Settings and Partition Issues that can affect success.

Hardware and Software tools needed.

Differences between working onsite and in a computer forensics lab.

Overview of how data is stored on hard disk drives.

Introduction to SafeBack bit stream image software.

The SafeBack Backup and Restoration Process.

The SafeBack Verification Process and Audit Log.

Using Tape media to store bit stream backup images.

Handling RAID network drives.

Avoiding Data Bleed from one case to another.

Answers to Frequently Asked Questions regarding SafeBack and the bit stream backup process.

The training course will include detailed instruction and hands-on experience in using NTI's forensic tools which have been specifically developed for the bit stream backup imaging process. These tools include SafeBack 3.0, DiskSig Pro, DiskScrub and M-Sweep. Licensed copies of these software tools are provided in the price of tuition for those that are not already licensed for the software. If you have an interest in this course, please contact us regarding pricing and more specific information.

Back To NTI's Home Page