EnCase v7 Computer Forensic Training 

Medium of instruction: Taught in English Language


Trainer Profile
Mr. Alan Jeffries

Computer forensics & mobile device forensics leader & practitioner with twenty-three years’ experience in the information technology arena primarily in digital forensics & I.T. security; & with nineteen years digital forensics & technical consulting expertise.

Involved in numinous custodian collections, independent investigations & reporting of collected data for compliance departments at a number of banks, hedge funds, private equity firms, as well as small, medium and large enterprises.

Investigations have included internal fraud, embezzlement, intellectual property claims and theft, misappropriation of data, network intrusion and other illegal access, malicious email (point of origin) forensic recovery from spoliation of evidence, physical damage and accidental over writing of system and user data.

Hong Kong Court Attendance – Expert Evidence Presented

Who Should Attend

​This course is intended for IT security professionals, litigation support and forensic investigators Participants may have minimal computer skills and may be new to the field of computer forensics.

Training Schedule

Time: 09:00 to 18:00   <Four-Days - 32 hours>
Venue: Hong Kong

Training Fees: HK$ 22,000 per Student per Course

EnCase v7 Computer Forensics I (CF1) Training .................................. 23-26 Aug. 2016

​EnCase v7 Computer Forensics II (CF2) Training ................................. 13-16 Sept. 2016

​​​​EnCase v7 Advanced Computer Forensics (ACF) Training ................... 17-20 Oct. 2016

​EnCase v7 Advanced Internet Examinations (AIE) Training ................... coming soon


EnCase v7 Computer Forensics I (CF1) Training 

Prerequisite: Basic computer skills. Advance preparation for this course is not required.

This hands-on course involves practical exercises and real-life simulations in the use of EnCase® Forensic version 7 (EnCase v7). The class provides participants with an understanding of the proper handling of digital evidence from the initial seizure of the computer/media, acquisition concepts, including live evidence acquisition. Instruction then progresses to the analysis of the data. It concludes with archiving, validating the data, and basic report creation.

Download CF1 Course Syllabus

​EnCase v7 Computer Forensics II (CF2) Training 

Prerequisite: EnCase® v7 Computer Forensics I.

This hands-on course is designed for investigators with strong computer skills, prior computer forensics training, and experience using the EnCase® Forensic (EnCase). This course builds upon the skills covered in the EnCase® Computer Forensics I course and enhances the examiner's ability to work efficiently through the use of the unique features of EnCase. Students must understand evidence handling, the structure of the evidence file, creating and using case files, and data acquisition methods, including DOS-based, hardware write protected, crossover cable, and disk-to-disk. It is also important that the students are familiar with the methods for recovering deleted files and folders in a FAT environment, conducting keyword searches across logical and physical media, creating and using EnCase® bookmarks, file signatures and signature analysis, and locating and understanding Windows® artifacts.

Download CF2 Course Syllabus

​​​​EnCase v7 Advanced Computer Forensics (ACF) Training 

Prerequisite: EnCase® v7 Computer Forensics II or EnCE® Certification.

This hands-on course is designed for examiners with advanced computer skills and two or more years of experience working in the field of computer forensics. Participants learn to use some of the more advanced features of EnCase® Forensic Version 7 (EnCase v7) while examining operating and file system artifacts from the Microsoft Windows operating systems. The course demonstrates advanced methods of data recovery and identification and recovery of encrypted data.

Download ACF Course Syllabus

​EnCase v7 Advanced Internet Examinations (AIE) Training

Prerequisite: EnCase® v7 Computer Forensics II or EnCE® Certification.

This hands-on course involves practical exercises and real-life simulations. The class focuses on the forensic evidence located on the computer belonging to the suspect and /or victim – not online or cyber investigations. Email files and the Internet are cornerstones of consumer and business computer use. Virtually all computer forensic examinations will involve analysis of email and Internet artifacts, underscoring the need to understand the relevance of Internet and email-based evidence recovered during examinations.

Download AIE Course Syllabus


Leading to the EnCase Certified Examiner ( EnCE )


EnCE® Certification Program

The EnCase® Certified Examiner(EnCE®) program certifies both public and private sector professionals in the use of Guidance Software's EnCase computer forensic software. EnCE certification acknowledges that professionals have mastered computer investigation methodology as well as the use of EnCase software during complex computer examinations. Recognized by both the law enforcement and corporate communities as a symbol of in-depth computer forensics knowledge, EnCE certification illustrates that an investigator is a skilled computer examiner.