RT450, Large Data Set Acquisitions (LDSA)
Who Should Attend:
Computer crime investigators and forensic examiners
Prerequisites:
TT110 (INCH) and RT120 (CIRC) or Test outs
Duration:
5 Days
Course Description:
Students examine Large Data Sets including, RAID, NAS, and SAN technologies.
They also examine Large Data Set Acquisitions from a forensic and investigative perspective.
Objectives:
- Discuss and explain various RAID technologies
- Identify RAID implementations
- Recognize Network Attached Storage (NAS) and Storage Area Network (SAN) devices
- Conduct a Large Data Set search and seizure using best practices
- Create forensically sound images of various Large Data Set storage devices
- Compare and contrast common forensic tools
Topics Covered:
Large Data Set Acquisition Concepts and Methodology
Redundant Array of Independent Disks
- RAID Essentials, Planning, Preparation and Physical Assessment
- RAID Arrays in Windows and Linux Environments
Network Attached Storage (NAS)
- Essentials and Implementations
- Onsite Assessment and Acquisitions
Storage Area Networks (SAN)
- Essentials, Implementations and Acquisitions