EnCase Navigating EnCase Version 8

CPE: 32 créditos. Nivel: básico.

Método de enseñanza: grupo.

Nivel NASBA definido: básico.

Código: DF220.

Duración: 3 días.

Para más información, descargue el programa completo de los tres días en PDF:


About the course

This hands-on course provides practical demonstrations and real-life simulations to help understand the methodology of using OpenText™ EnCase™ Forensic Version 8 (EnCase) in digital forensic cases involving criminal, corporate, or cybersecurity investigations. In additional to providing instruction on the transitional differences between EnCase Version 6 and Version 8, it also includes instruction on creating a case, using case templates and investigation pathways, the EnCase™ Evidence Processor, indexed searching capabilities, the Direct Network Preview, the new hash analysis module, and options for bookmarking with the ability to use different colors. Although this class is designed for Version 6 users who have previously attended the EnCase Computer Forensics II course (or users who are EnCE qualified), it also serves as a refresher to Version 7 users with the addition of finding out about the new features of EnCase Version 8.


This course IS NOT a substitute for attending the DF120 - Foundations in Digital Forensics and DF210 - Building an Investigation with EnCase. Navigating EnCase Version 8 is designed and paced for experienced digital investigators who are looking to move to EnCase Version 8 from an earlier version or another investigative product. Key investigative concepts are NOT covered in this course, rather, the knowledge of these concepts is assumed and this course focuses on how to use EnCase Version 8.


EnCase Computer Forensics II* in EnCase Forensic Version 6 or above or EnCE Certification. Advance preparation for this course is not required.

*The new name for the Computer Forensics II course is DF210 - Building an Investigation with EnCase.


Students attending this course will learn the following: