The Introduction to Digital Evidence Analysis (IDEA) training program teaches the student how to navigate through one of the most commonly used computer forensic suites in the United States, Access Data's Ultimate Toolkit. A targeted introduction to number theory as related specifically to digital forensics is also provided. This introduction covers binary, hexadecimal, ASCII, Unicode, code pages and how these relate to digital media, files, RAM and digital forensic analysis in general. Additionally, IDEA will provide the student with an introduction to digital forensic-specific legal issues via FLETC legal instructors who provided the latest case law in this judicially dynamic area of law.
The IDEA training program was born out of necessity. As the digital forensic suites have become more and more powerful, the amount of time needed to adequately teach their interface has grown accordingly. To help alleviate the high tempo and stress associated with SCERS, the IDEA course was designed as a comprehensive introduction to the interfaces of the forensic suites currently being taught in the Seized Computer Evidence Recovery Specialist (SCERS). As well as a digital forensic overview, students are afforded a broad overview of the FTK interface and provided ample opportunity in mock cases to acquaint themselves with the tool.
As IDEA is primarily a digital forensic preparatory program, its overhead and cost are relatively modest. Neither software, hardware nor forensic textbooks are issued during this program. The knowledge and experience necessary in passing SCERS are gained by the student in IDEA curriculum. IDEA bridges the Digital Evidence Acquisition Specialist Training Program (DEASTP) and SCERS.
Applicant must be a law enforcement officer/agent with arrest authority in the prevention, detection, apprehension, detention and/or investigation of felony and/or misdemeanor violations of federal, state, local, tribal, or military criminal laws; Direct Law Enforcement Support Personnel (DLESP); or employees of a federal, state, local, tribal or international agency who perform functions directly related to a law enforcement or Department of Homeland Security (DHS) mission but do not necessarily have the authority to carry and use firearms, make arrests and/or conduct searches with or without a warrant. This category of personnel may also include military personnel preparing for deployment. Successful completion of FLETC's Digital Evidence Acquisition Specialist Training Program (DEASTP) or equivalent is required for admission to the IDEA. Applicants that have not attended FLETC's DEASTP may attend the IDEA training program if they have experience and knowledge, acquired through formal education and/or on-the-job training, which is equivalent to that which is presented within the DEASTP. The equivalency training is subject to prior approval by the IDEA Program Coordinator. (Contact FLETC for waiver approvals.) Participants are expected to have experience in seizing and imaging desktop and notebook computers and associated media in a forensically sound manner as well as substantial experience with the Microsoft Windows© Operating System or equivalent GUI based system(s).
This program is part of the FLETC's Cybercrime Track (FCT) or the Electronic Surveillance (ELSUR) Track. By entering FCT or ELSUR into the search window, other related Cyber Division programs can be found.
Required Training Materials
- Electronic Law and Evidence
- Forensic Hardware
- Forensic analysis of digital data in a Windows environment
Program Contact Info
Glynco: (912) 267-2485