On Scene Triage

This class provides hands-on training using the FBI Computer Analysis Response Team’s two preview tools: ImageScan and DriveQuest. ImageScan is designed to help law enforcement officers rapidly preview digital evidence for graphics files. DriveQuest also searches for graphics, but adds other advanced search capabilities. Both tools helps law enforcement officers preview computers of interest during an investigation and identify those that should be submitted for full forensic examination in a laboratory environment. Investigators use the tool to search for and view numerous types of files on a subject’s computer while making absolutely no changes to any files. Automated reports are generated for viewing some system information, registry information, and Internet history. Also, users can select from pre-defined keyword lists or use their own keywords to search for files of interest and then store selected results on a thumb drive for later viewing. ImageScan and DriveQuest use a customized Linux boot DVD that maintains the forensic integrity of the previewed computer. This class is intended for investigators with an intermediate-level knowledge of computers. ImageScan and DriveQuest DVD and USB devices will be provided to all class attendees.

When Jun 07, 2017
08:00 AM 04:00 PM
Where San Diego RCFL
Contact Name
Contact Phone 858-638-7400
Add event to calendar vCal