 |
Microsoft Network Forensics
This instructor led course is designed to be 40% lecture, 60%
practical application. It covers the fundamental architecture of
a Microsoft based network, and how its various components
interact. In this five day course students will need to
forensically acquire and examine a network consisting of an IIS
Server, SQL Server, Exchange Server, Terminal Server, Share
Point and ISA Firewall, which has been compromised and being
used for elicit purposes. The course is designed to provide
students with practical experience using a compliment of
forensic tools to discover how and by whom the network was
compromised, as well as document processes and actions taken to
prepare the case for trial.
- Five-day
Course
- $1,995.00
- Per Student
- Course
Details
- Limited
Seats for Each Class
*Course prices
are subject to change due to new software releases, location,
and other circumstances. Classes are subject to cancellation
within two weeks of the class start date. Classes are guaranteed
to run if not canceled before this two week period. Students can
cancel up to two weeks before the class runs.
OPTIONAL CERTIFICATION AVAILABLE
|
|
Students will have the option to complete a written
examination covering both theory & application of
course concepts. Students must pass with 85% to receive
certification.
|
TESTIMONIAL
Paraben's Network Seizure training provides a comprehensive
overview of the building blocks of Microsoft networks. This
information is presented in a clear and concise manner that
leaves no doubt that this is not simply a rehashed network
administration class. Material presented is balanced between
sufficiently detailed to understand "why" the system
works the way it does and the practical "how and
where" of obtaining useful evidence. Any given network
seized whether through a search warrant or civil subpoena will
be structured slightly differently. Understanding the
"right" way to put together a network is often of
little use. Forensic investigators must often learn to unravel
the accumulation of years of unplanned growth. Paraben's network
seizure training teaches the mind set that tools follow the uses
of the investigator, they do not dictate the investigator's
actions. Paraben's tools are uniquely suited to this approach
because Paraben does not offer a single solution from A to Z.
Paraben tools are open; that is, they allow an investigator to
acquire evidence from disparate sources and make them available,
not just to a central search function, but to any tool available
to the investigator.
Dr. D. Kall Loper, Ph.D.
Assistant Professor
Department of Criminal Justice
University of North Texas
Read Dr. Kall's article on Network Forensics:
The
Network Crime Investigator: Tools and Training for the Next Step
|
