Date/TimeDate(s) - Tue, Oct 13, 2020 - Thu, Oct 15, 2020
LocationDigital Shield Training Academy
The Belksaoft Evidence Center Certification course is designed for beginner to intermediate practitioners in the field of both computer and mobile based forensic examinations. This course will focus on the functionality of the Belkasoft Evidence Center, how investigators can utilize the Belkasoft Forensic Platform to acquire, analyze and perform advanced searches and filtering on digital evidence.
01 – Introduction
The BEC Certificate Course introduction will provide a brief history of Belkasoft followed by an an overview of course logistics enabling instructors and students to become familiar with one another and their professional experiences in digital forensics.
02 – BEC Overview
Students will receive a brief history and comprehensive overview of the BEC platform, focus, and core competencies.
03 – BEC User Interface
Instructors will guide students through the BEC user interface, controls, windows, and menus to implement familiarity with the platform in preparation for practical exercises.
04 – BEC Workflow
Students will become familiar with the BEC workflow required to manage cases, acquire digital evidence, prepare the platform for efficient forensic analysis, and draft effective reports on findings.
05 – Search Techniques
Students will learn how to leverage BEC platform tools and features to conduct efficient searches on digital evidence artifacts using keywords and advanced expressions.
Students will also learn effective bookmarking techniques and how to export pertinent data from the BEC environment for subsequent analysis with 3rd party tools.
06 – Multimedia Analysis
Instructors will guide students on tools and techniques within the BEC platform to forensically analyze digital multimedia to discover artifacts (such as Geotag, EXIF) pertinent to an ongoing case. Students will also learn how to properly handle illicit images in preparation for reporting.
07 – Advanced Analysis
Students will learn how to utilize BEC to analyze RAM data, detect encrypted files, discover Internet-based evidence, and carve data from unallocated space or embedded documents (Ex: MS Word)
08 – BEC Reporting
Instructors will guide students on the importance of reporting and techniques on how to utilize the BEC platform to create effective forensic reports on findings.
09 – BEC Certification Exam
Course links will be sent 3 days before class. Files needed for the course will be uploaded both to an FTP server and a Dropbox for download. These links will be sent out 3 days prior to class.
Students will be required to complete a final exam consisting of written questions and practical skills assessments to demonstrate required capability on the BEC platform.
All courses require at least 8 participants per course, and courses are subject to cancellation if the minimum participants are not met. DSI will notify all students in advance if the course will go off as planned or will be canceled or postponed.
For more information contact: