courses take place here
Open Source Training: (gleicher Kurs auf deutsch)

memory forensik

Digital forensics traditionally tend to use data traces on non-volatile memory like hard disks and flash memory. This training course is focused on retrieving and evaluating volatile memory data on Windows- and Linux-based systems.

We are featuring a set of efficient open-source tools designed to create and analyse memory dumps. You learn to use these tools by means of realistic case studies.

Price

2 days, 934.00 € + 19% vat = 1,111.46 €

Full eight clock hours per day, complete set of literature, WiFi, complimentary notebook, full board, drinks (selected wines are charged separately), pastries, homemade cakes, sauna, social program

Extended/reduced amenities on demand:

Surcharge per guest night in two bed rooms (spacious and comfortable rooms) 59.00 € + 7% vat = 63.13 €per night
Surcharge per guest night in the Linuxhotel-flat share 83.00 € + 7% vat = 88.81 €per night
Surcharge per guest night in single rooms (depending on availabity, early reservation recommended) 129.00 € + 7% vat = 138.03 €per night
Reduction for half board instead of full board accomodation -29.41 € + 19% vat = -35.00 €per day
Reduction w/o social program -8.40 € + 19% vat = -10.00 €per evening

Tax deductibility * Terms of cancellation

Schedules/Reservations

Please select your favourite reservation date

Tutors

Hans-Peter Merkel (Dipl. Ing.) has been training law enforcement officers in Germany and foreign countries for several years. He is assisting law enforcement authorities in searching procedures and is conducting subsequent forensic evaluations. His primary focus is analysis of Linux/BSD internet servers.

prerequisites for attending

Participants should have attended previously the Digital Forensics training course (or be familiar with its contents).

If you feel uncertain on this point, we look forward to assist you via email or phone.

Course contents

Installing a forensic evaluation system

Forensic analysis of memory dumps: Case studies

Reconstruction information from working memory

Participants will receive a Live DVD enabling them to install the course's tools and methods on their own office PC.

Course schedule