Did you know Cybrary has FREE video training? Join more than 2,500,000 IT and cyber security professionals, students, career changers, and more, growing their careers on Cybrary.
Overview
If you’re not using AFF4 (Advanced Forensics File Format v4) then your forensics process is stuck in the past. In this course we’ll be discussing the performance problems associated with the Expert Witness Format (E01/EX01) and raw or DD forensic images. In preparation for the next series of Atlantic Data Forensics’ courses on using Evimetry for forensic collections, the viewer will become familiar with the AFF4 format and the significant speed, compression and documentation advantages AFF…
Course Content
Module 1: Introduction
Module 2: Why you Should be Using AFF4
Module 3: Conclusion
Course Description
Prerequisites
- Planning to collect data for evidence
- In a position where it might become necessary to collect digital evidence
Study Resources
- http://www.osdfcon.org/presentations/2016/Bradley_Schatz-AFF4.pdf
- https://www.aff4.org/index.html
- https://github.com/aff4/Standard
Course Goals
By the end of this course, students should be able to:
- Understand what AFF4 is
- Realize the problems associated with common forensic file formats
- Acknowledge the advantages of AFF4
- Recognize the tools using AFF4
Instructed By
Brian Dykstra
Instructor
Provided By
Certificate of Completion
Complete this course and earn a Computer Forensics File Formats: Why you Should be Using AFF4 Certificate of Completion
Competency Areas