This is a Spyder Forensics class. This course covers the use various applications and utilities to successfully identify, process, understand and exploit numerous database structures found on iOS, Android, Windows, and Apple systems. Students will gain knowledge of how relational databases function in the storage of records and fields of information to support a front-end application. SQLite will be covered in detail where the attendee will learn how to recover deleted information from Free Pages and unallocated space within the primary and journal files using scripting techniques. Additional databases will then be examined including ESE, LevelDB’s and Binary Plists.

The IACIS Advanced Mobile Device Forensics Training Program is a 36-hour course of instruction, offered over five (5) consecutive days. Take your mobile forensics investigative skills to the next level with our comprehensive course on Advanced Mobile Device Forensics. This class is designed for seasoned forensic examiners and investigators and will equip you with an intricate understanding of Android and iOS file systems.

The IACIS Advanced Mobile Device Forensics Training Program is a 36-hour course of instruction, offered over five (5) consecutive days. Take your mobile forensics investigative skills to the next level with our comprehensive course on Advanced Mobile Device Forensics. This class is designed for seasoned forensic examiners and investigators and will equip you with an intricate understanding of Android and iOS file systems.

This 36-hour intermediate level course will equip you with the practical skills and knowledge to exploit data using a variety of scripting languages. Attendees will extract data from diverse sources using scripting languages such as RegEx, SQLite, BASH, Python and PowerShell then learn how to further create scripts to extract meaningful and relevant information to support your case examination. Students will use real-world examples of data to practice their new skills on and ultimately deepening their knowledge in scripting capabilities beyond the forensic tool. No previous knowledge of programming or scripting is expected.

This class will give you access to the BCFE two week training course as well as automatic admission into the CFCE Certification Cycle.

The IACIS Computer Forensics: Real World (Formerly Applied Computer Forensics (ACF)) course is a 36-hour course of instruction taking students through a realistic case scenario built on the Windows 10 Operating System. This class uses the latest versions of the major and emerging forensic tools on the market, to look at different artifacts and lets you determine the strengths and weaknesses of each tool. The class is led by users of the tools (rather than vendor trainers) and examines a real world type case giving students the opportunity to evaluate the software in a unique, open, and honest environment.

The IACIS Cyber Incident Forensic Response (CIFR) Training Program is a 2-week course of instruction designed to provide students with detailed study of traces left behind on computers and networks unique to intrusions and malware incidents. At the conclusion of this course, students will have a clear understanding of responding to and managing intrusions and malware incidents, what artifacts are left during these incidents, and how knowledge of these artifacts can play a significant role in the forensic and investigative processes.

This course will provide the student with the understanding of how to accomplish effective investigation of Darknet sites and users. The course will allow Law enforcement to step up their investigative skills to meet the new challenges offered by the anonymity of the Darknet. STRICTLY Law Enforcement, Government, Armed Forces and Police ONLY. This course is taught by Spyder Forensics.

The IACIS Enterprise Cyber Incident Forensic Response (ECIFR) class is a natural follow-on for the IACIS CIFR class. It is an expansion of skills from analyzing a small number of systems using traditional imaging + manual analysis processes, to introducing and building skills that allow the student to analyze systems at scale, building and implementing toolsets to analyze systems spread across the network.

The IACIS Mobile Device Forensics Training Program is a 36-hour course of instruction, offered over five (5) consecutive days. This program will expand the students existing mobile forensic knowledge and skillset. It is designed to provide students with intermediate to advanced skills needed to detect, decode, decrypt, and analyze evidence recovered from mobile devices during mobile device investigations.

The IACIS Mobile Device Forensics Training Program is a 36-hour course of instruction, offered over five (5) consecutive days. This program will expand the students existing mobile forensic knowledge and skillset. It is designed to provide students with intermediate to advanced skills needed to detect, decode, decrypt, and analyze evidence recovered from mobile devices during mobile device investigations.

The IACIS Managing a Digital Forensic Laboratory (MDFL) Training Program is a 16-hour course of instruction designed to provide supervisors, managers and executives with the best practices in digital forensic laboratory operation. This class is Thursday and Friday of Week 1 ONLY

This course is taught by SUMURI. The Best Practices in Mac Forensics (MFSC-101) course shows you how and why you are missing evidence using non-native forensic solutions and how to find what is missed by using a Mac to process a Mac.

The Advanced Practices in Mac Forensics (MFSC-201) course provides unparalleled vendor-neutral and tool-agnostic instruction in advanced topics relating to the forensic use and analysis of Apple hardware, technologies, and applications. It is highly recommended that registrants take MFSC-101 before enrolling in MFSC-201. This is because MFSC-201 assumes prior knowledge of Mac Forensics and only offers a limited review of topics covered in MFSC-101. Therefore, it is important for registrants to have experience in Mac Forensics to fully benefit from the MFSC-201 course. To be eligible for SUMURI's CFME certification process, both MFSC-101 and MFSC-201 must be successfully completed. This course is taught by Sumuri, LLC

This is an introductory course in Open-Source Intelligence (OSINT) information research, collection, exploitation, and analysis. OSINT is becoming increasingly important across investigations of all types, especially for law enforcement and government agencies. This course will teach the student how to protect themselves and their organization by providing defensive techniques in the operating environment, including misattribution and creation and usage of sock puppets.

The IACIS “Preparing for Lab Accreditation” (PLA) is a three-day course of instruction. This course is designed for examiners, supervisors, managers, and executives that have the responsibility to develop and implement policies and procedures within a digital forensic unit or laboratory in their efforts to obtain accreditation.

This course is designed for the law enforcement professional that needs to leverage volatile memory to find evidence that does not exist on disk. The class will progress just like an investigation.

This 36-hour advanced level course will equip you with the practical skills and competencies required to identify and extract various sources of data recoverable from Unmanned Aircraft Systems (UAS), also known as Drones, including their associated control devices in line with approved best practices.

The WFE Training Program is designed to build on and expand the students' existing forensic knowledge and skillset and is not an entry level class.