Pre-conference Workshop 2017 Featured

9:00 am - 4:00 pm Sessions

Monday, October 2, 2017


Acquisition and Preservation of Data for Investigation

Examining the data to find out “what happened” in the case of suspected misconduct, criminal activity, or a system breach is more than looking at what is displayed on screen at the time of discovery. Often it requires imaging the hard drive or other non-volatile storage device, copying specific file system structures or acquiring volatile system memory to get a more complete picture. Learn about write-blockers, imaging techniques for non-volatile drives and RAID arrays and the acquisition and basic analysis of RAM. Materials and at-home examples will be provided.

Instructor: Bryan Burkhardt, Director, Electronic Crime Institute, Des Moines Area Community College

Time: 9:00am to 4:00pm

Cost: $159

Location: FFA Enrichment Center, 1055 SW Prairie Trail Parkway, Ankeny, IA 50023


Register Here

More in this category: Capture the Flag »
FFA Enrichment Center