This hands-on course focuses on the use of EnCase Enterprise to conduct investigations in a live network environment as well as the administration and advanced use of EnCase Enterprise. Students will learn how to use EnCase Enterprise to address internal investigations, electronic discovery, and audits in a manner consistent with recognized standards as well as integrate EnCase Enterprise with intrusion detection systems.

      The students will learn about EnScript® programming for the creation and use of filters and conditions. The Snapshot function will be introduced and used throughout the course, giving the students a thorough familiarity with this key feature. The attendees will learn about preferred enterprise acquisition techniques and eDiscovery collection concepts. The students will use their new-found knowledge and skills to identify and decrypt encrypted files. The students will expand on their knowledge of the function of the EnCase Enterprise servlet.

Prerequisite

It is highly recommended that students attend EnCase® Computer Forensics I and II or the five-day implementation training conducted by Guidance's Professional Services Division. This live course is designed for senior corporate security professionals, auditors, legal professionals and investigators. Students should currently be working with EnCase® Enterprise or employed by an organization that plans to purchase EnCase Enterprise.