• CPE Credits: 32**
  • Course Level: Introductory
  • Delivery Method: Group-Live, Classroom
  • Tuition: $2,750.00 USD*


​Basic computer skills. Advance preparation for this course is not required.​

Who Should Attend:

This course is intended for digital forensic investigators, including law enforcement, government, military, corporate, cybersecurity, and litigation support professionals. Participants may have minimal computer skills and may be new to the field of computer forensics.

*May vary by location and currency.

For more information regarding refund concerns, complaint or program cancellation policies, contact Guidance Software Training at training@guidancesoftware.com or call +1-626-463-7966.

**Guidance Software, Inc. is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.learningmarket.org.


DF120 – Foundations in Digital Forensics with EnCase® Forensic

**Formerly EnCase v7 Computer Forensics I.

This hands-on course involves practical exercises and real-life simulations in the use of EnCase® Forensic (EnCase) Version 8. The class provides participants with an understanding of how EnCase is used to create cases, the configuration options available, and evidence acquisition concepts. Instruction then progresses to the analysis of the data whether related to criminal investigations, cybersecurity incidents, or other matters.  The course will cover techniques such as keyword or indexed searching along with hash analysis.  Participants will learn how to bookmark and export evidence.  It concludes with instruction on basic report creation and archiving, validating the data, and restoring the case.

Delivery method: Group-Live. NASBA defined level: basic.

 Students attending this course will learn the following:

•    The EnCase digital forensic methodology
•    How to navigate the EnCase interface
•    How to create a case and how to preview and acquire media
•    How to extract data and files from your evidence
•    How to bookmark evidence files, file sets, and data structures
•    How to conduct raw and index searches
•    How to analyze file signatures and view files
•    How to conduct hash and entropy analyses and import hash sets
•    How to import and export data to and from Project Vic
•    How to install external file viewers to EnCase
•    How to locate data in unallocated space
•    How to prepare reports, using templates provided with EnCase
•    How to create a report template
•    How to restore evidence
•    How to archive files and data created through the analysis process 
•    The proper techniques for handling and preserving evidence


Course Registration

To register for this course, please select your desired location and date below.

  • Location:

Call Sales

Need help immediately?
Call us at (844) 576-9354, or submit this form: