Welcome to BelkaCE!
This course will provide you with the knowledge and preparation to use the new BelkaCE platform in your lab to analyze digital evidence acquired from multiple sources of storage media. This course is meant for beginners but also contains information and scenario-based exercises suitable for advanced users looking for a refresher in the realm of digital forensics.
You will be challenged, but please do not “suffer in silence”. Our instructors are available for questions and clarification on concepts discussed in this course. Reach out to them as needed!
Scott Pearson – spearson@digitalshield.net
Joe Church – jchurch@digitalshield.net
Suggested Hardware Configuration
Belkasoft Evidence Center is very powerful and can be resource-intensive depending on how the platform is being used for analysis. It is highly recommended that you take this course using a system with the following minimum specifications:
- Windows 10
- 8 GB RAM
- 500GB Hard drive (with at least 50GB of free space)
- 3MBPS broadband Internet
- 32GB USB 3.0 external hard drive
Modules
User Interface
Lessons
BelkaCE Workflow
Lessons
Search Techniques
Lessons
Multimedia Analysis
Lessons
Advanced Analysis
Lessons
- Module 06 – Advanced Analysis (RAM)
- Module 06 – Advanced Analysis (Encryption Detection)
- Module 06 – Advanced Analysis (Data Carving)
- Module 06 – Advanced Analysis (Internet-based Data)
- Activity 6.1A – RAM Analysis (Pagefile)
- Activity 6.1B – RAM Analysis
- Activity 6.2 – Encryption Detection
- Activity 6.3 – Data Carving
- Activity 6.4 – Internet-based Data
- QUIZ – Module 06