US flag   Official website of the Department of Homeland Security

Introduction to Digital Evidence Analysis

Acronym: 
IDEA
Length: 
5 Training Days
Locations Offered: 
Export -

Description

The Introduction to Digital Evidence Analysis (IDEA) training program teaches the student how to navigate through one of the most commonly used computer forensic suites in the United States, Access Data's Ultimate Toolkit.  A targeted introduction to number theory as related specifically to digital forensics is also provided.  This introduction covers binary, hexadecimal, ASCII, Unicode, code pages and how these relate to digital media, files, RAM and digital forensic analysis in general. Additionally, IDEA will provide the student with an introduction to digital forensic-specific legal issues via FLETC legal instructors who provided the latest case law in this judicially dynamic area of law.

The IDEA training program was born out of necessity. As the digital forensic suites have become more and more powerful, the amount of time needed to adequately teach their interface has grown accordingly. To help alleviate the high tempo and stress associated with SCERS, the IDEA course was designed as a comprehensive introduction to the interfaces of the forensic suites currently being taught in the Seized Computer Evidence Recovery Specialist (SCERS).  As well as a digital forensic overview, students are afforded a broad overview of the FTK interface and provided ample opportunity in mock cases to acquaint themselves with the tool.

As IDEA is primarily a digital forensic preparatory program, its overhead and cost are relatively modest. Neither software, hardware nor forensic textbooks are issued during this program. The knowledge and experience necessary in passing SCERS are gained by the student in IDEA curriculum. IDEA bridges the Digital Evidence Acquisition Specialist Training Program (DEASTP) and SCERS.

Prerequisites

Applicant must be a law enforcement officer/agent with arrest authority in the prevention, detection, apprehension, detention and/or investigation of felony and/or misdemeanor violations of federal, state, local, tribal, or military criminal laws; Direct Law Enforcement Support Personnel (DLESP); or employees of a federal, state, local, tribal or international agency who perform functions directly related to a law enforcement or Department of Homeland Security (DHS) mission but do not necessarily have the authority to carry and use firearms, make arrests and/or conduct searches with or without a warrant. This category of personnel may also include military personnel preparing for deployment. Successful completion of FLETC's Digital Evidence Acquisition Specialist Training Program (DEASTP) or equivalent is required for admission to the IDEA. Applicants that have not attended FLETC's DEASTP may attend the IDEA training program if they have experience and knowledge, acquired through formal education and/or on-the-job training, which is equivalent to that which is presented within the DEASTP. The equivalency training is subject to prior approval by the IDEA Program Coordinator. (Contact FLETC for waiver approvals.) Participants are expected to have experience in seizing and imaging desktop and notebook computers and associated media in a forensically sound manner as well as substantial experience with the Microsoft Windows© Operating System or equivalent GUI based system(s).

This program is part of the FLETC's Cybercrime Track (FCT) or the Electronic Surveillance (ELSUR) Track. By entering FCT or ELSUR into the search window, other related Cyber Division programs can be found.

Required Training Materials

None.

Program Syllabus/Curriculum

  • Electronic Law and Evidence
  • Forensic Hardware
  • Forensic analysis of digital data in a Windows environment

Program Registration

  • The Federal Law Enforcement Training Centers (FLETC) partner with numerous federal agencies to provide law enforcement training. If you are a member of one of these Participating Organizations, please contact your agency training officer for class availability.  If your agency is not a partner organization of the FLETC and you are interested in attending a course, please contact us at FLETC Admissions. Class availability is limited for non-partner organizations. 
  • The FLETC supports our local law enforcement communities by providing training opportunities, onsite at FLETC campuses and exported to host locations across the United States. State, local and tribal officers can apply for this training at FLETC Application for Student Training (FAST).
  • For more information on all training at FLETC, please contact us at FLETC Admissions.

Program Contact Info

Glynco: (912) 267-2485