Microsoft Network Forensics

This instructor led course is designed to be 40% lecture, 60% practical application. It covers the fundamental architecture of a Microsoft based network, and how its various components interact. In this five day course students will need to forensically acquire and examine a network consisting of an IIS Server, SQL Server, Exchange Server, Terminal Server, Share Point and ISA Firewall, which has been compromised and being used for elicit purposes. The course is designed to provide students with practical experience using a compliment of forensic tools to discover how and by whom the network was compromised, as well as document processes and actions taken to prepare the case for trial.

• Five-day Course
• $1,995.00 - Per Student
• Course Details
• Limited Seats for Each Class - | REGISTER NOW --> |

*Course prices are subject to change due to new software releases, location, and other circumstances. Classes are subject to cancellation within two weeks of the class start date. Classes are guaranteed to run if not canceled before this two week period. Students can cancel up to two weeks before the class runs.

OPTIONAL CERTIFICATION AVAILABLE

Students will have the option to complete a written examination covering both theory & application of course concepts. Students must pass with 85% to receive certification.

TESTIMONIAL
Paraben's Network Seizure training provides a comprehensive overview of the building blocks of Microsoft networks. This information is presented in a clear and concise manner that leaves no doubt that this is not simply a rehashed network administration class. Material presented is balanced between sufficiently detailed to understand "why" the system works the way it does and the practical "how and where" of obtaining useful evidence. Any given network seized whether through a search warrant or civil subpoena will be structured slightly differently. Understanding the "right" way to put together a network is often of little use. Forensic investigators must often learn to unravel the accumulation of years of unplanned growth. Paraben's network seizure training teaches the mind set that tools follow the uses of the investigator, they do not dictate the investigator's actions. Paraben's tools are uniquely suited to this approach because Paraben does not offer a single solution from A to Z. Paraben tools are open; that is, they allow an investigator to acquire evidence from disparate sources and make them available, not just to a central search function, but to any tool available to the investigator.

Dr. D. Kall Loper, Ph.D.
Assistant Professor
Department of Criminal Justice
University of North Texas

Read Dr. Kall's article on Network Forensics:
The Network Crime Investigator: Tools and Training for the Next Step