EnCase Advanced Internet Examinations


EnCase® Advanced Internet Examinations

This hands-on course involves practical exercises and real-life simulations. The class focuses on the forensic evidence located on the computer belonging to the suspect and /or victim – not online or cyber investigations. Email files and the Internet are cornerstones of consumer and business computer use. Virtually all computer forensic examinations will involve analysis of email and Internet artifacts, underscoring the need to understand the relevance of Internet and email-based evidence recovered during examinations.
Delivery method: Group-Live. NASBA defined level: advanced.

The course provides in-depth coverage on artifacts involving:
* Students will learn the history, operation and artifacts associated with peer-to-peer file-sharing applications, such as BitTorrent™ and the Ares Galaxy P2P Network
* Students will learn how the GigaTribe peer-to-peer software allows its users to chat and share files individually and within groups
* Students will learn the operation of the Microsoft® Internet Explorer Web browser with regards to typed URLs, password and form-data storage, cookies, Internet history and cache content
* Students will learn how Web pages are constructed and will use this information, together with their new-found knowledge of cached Internet Explorer Web content to correctly rebuild Web pages
* Students will learn about the history, operation and artifacts associated with Mozilla Firefox® and Google Chrome®  
* Students will learn about the operation of Web search engines
* Students will learn the fundamental principles of e-mail operation how e-mail is sent and received; also how e-mail message data (including attached data) is encoded and how deleted data may be recovered in certain circumstances
* Students will learn about the Microsoft® Outlook PST structure




Training Schedule & Training Fees


EnCase Advanced Internet Examinations Training


Time: 09:00 to 18:00   <Four-Days>
Venue: Hong Kong
Training Fees: HK$ 22,000 per student

Medium of instruction: Taught in English Language

Schedule : coming soon


EnCase® v7 Computer Forensics II
​ or EnCE® Certification. Advance preparation for this course is not required.
Note: The content of this course is significantly different and we recommend that anyone who took the EnCase Internet & E-mail course prior to February 2004 now take EnCase Advanced Internet Examinations.

Who Should Attend:
​This course is intended for corporate and government/law enforcement investigators, legal professionals and network security personnel. Incident response supervisors and team members are encouraged to attend as are individuals working in a penetration testing or network intrusion investigation role. An understanding of the concepts of computer forensics and familiarity with the EnCase® Forensic software is required. Class curriculum is designed to provide a good overview of Internet usage investigation issues, both from a forensic and intruder perspective.





•  Limited offer, first come first served.
•  A Performer Ltd reserves the right to change the promotion detail without prior notice.
•  A Performer Ltd reserves the right to final decision.   
•  The course will not commence unless there is a sufficient number of enrolled students.
•  All fees paid are neither refundable nor transferable.



Leading to the EnCase Certified Examiner (EnCE)

The EnCase® Certified Examiner (EnCE®) program certifies both public and private sector professionals in the use of Guidance Software's EnCase® computer forensic software. EnCE® certification acknowledges that professionals have mastered computer investigation methodology as well as the use of EnCase® software during complex computer examinations. Recognized by both the law enforcement and corporate communities as a symbol of in-depth computer forensics knowledge, EnCE certification illustrates that an investigator is a skilled computer examiner.