ADF ADF PRO Training 

Digital Evidence Investigator Training

We offer a 2-Day hands-on, instructor-led ADF PRO training.  Students will learn how to configure ADF PRO, operate the digital forensic software, analyze and interpret the evidence and forensic results. 


Also Available Online

This course is also available online with self-paced learning via our learning management system. Start today to earn your ADF PRO Certified User Certificate today. The online self paced learning can be completed in about 20 hours. 


ADF PRO Certified Training Course Outline

Introductions & Getting Started

  • Digital Forensic Evidence and Triage Basics
  • Overview of How to Use ADF PRO 
    • ADF PRO Terminology – Artifact Captures
    • ADF PRO Terminology – File Captures
    • ADF PRO Search Profiles – Quick, Intermediate, and Comprehensive
    • ADF PRO Workflow

Setup & Installation

  • ADF PRO Software Installation and the Windows Assessment and Deployment Kit (WADK)

Booting & Bios 

  • Accessing BIOS/UEFI Setup
  • Accessing Boot Menu
  • UEFI and Fastboot Issues
  • Booting Apple Macintosh computers

Capture: Conducting a Scan

  • Case Study: Scanning attached media
  • Case Study: Scanning drive images
  • Case Study: Carrying out a boot scan
  • Case Study: Carrying out a live scan

Analysis: Navigating ADF PRO

  • Navigating Capture Results
  • Understanding Picture, Video, Keyword, Files, and Timeline Views
  • Column Settings
  • Filtering Captures and Picture, Video, Keyword, Files and Timeline views
  • Tagging
  • Commenting

Reporting 

  • Case Study: Creating appropriate reports
  • Reporting - HTML
  • Reporting - CSV
  • Reporting – Stand-alone viewer

Customizing with Keywords and Hash Values

  • Case Study: Creating hash captures and leveraging targeted folders
  • Case Study: Creating keyword and regular expression searches
  • Case Study: Creating appropriate search profiles
  • Case Study: Importing keyword and hash lists
  • Case Study: Identifying good and bad keywords

Imaging

  • Device Imaging

Advanced Issues

  • Implications of thorough file identification and searching within containers
  • File type creation and implications
  • Searching browser cache issues
  • Case Study: Knowledge check

PRO Module: Mobile Device Investigator

  • Overview and terminology
  • Connecting a mobile device
  • Preview Mode
  • Conducting a scan
    • Taking Screenshots
    • Search Profiles
    • Creating backups
  • Creating Mobile Search Profiles
  • Analyzing Mobile Evidence  
  • PRO Module Final Exam