ADF ADF PRO Training
We offer a 2-Day hands-on, instructor-led ADF PRO training. Students will learn how to configure ADF PRO, operate the digital forensic software, analyze and interpret the evidence and forensic results.
Also Available Online
This course is also available online with self-paced learning via our learning management system. Start today to earn your ADF PRO Certified User Certificate today. The online self paced learning can be completed in about 20 hours.
ADF PRO Certified Training Course Outline
Introductions & Getting Started
- Digital Forensic Evidence and Triage Basics
- Overview of How to Use ADF PRO
- ADF PRO Terminology – Artifact Captures
- ADF PRO Terminology – File Captures
- ADF PRO Search Profiles – Quick, Intermediate, and Comprehensive
- ADF PRO Workflow
Setup & Installation
- ADF PRO Software Installation and the Windows Assessment and Deployment Kit (WADK)
Booting & Bios
- Accessing BIOS/UEFI Setup
- Accessing Boot Menu
- UEFI and Fastboot Issues
- Booting Apple Macintosh computers
Capture: Conducting a Scan
- Case Study: Scanning attached media
- Case Study: Scanning drive images
- Case Study: Carrying out a boot scan
- Case Study: Carrying out a live scan
Analysis: Navigating ADF PRO
- Navigating Capture Results
- Understanding Picture, Video, Keyword, Files, and Timeline Views
- Column Settings
- Filtering Captures and Picture, Video, Keyword, Files and Timeline views
- Tagging
- Commenting
Reporting
- Case Study: Creating appropriate reports
- Reporting - HTML
- Reporting - CSV
- Reporting – Stand-alone viewer
Customizing with Keywords and Hash Values
- Case Study: Creating hash captures and leveraging targeted folders
- Case Study: Creating keyword and regular expression searches
- Case Study: Creating appropriate search profiles
- Case Study: Importing keyword and hash lists
- Case Study: Identifying good and bad keywords
Imaging
Advanced Issues
- Implications of thorough file identification and searching within containers
- File type creation and implications
- Searching browser cache issues
- Case Study: Knowledge check
PRO Module: Mobile Device Investigator
- Overview and terminology
- Connecting a mobile device
- Preview Mode
- Conducting a scan
- Taking Screenshots
- Search Profiles
- Creating backups
- Creating Mobile Search Profiles
- Analyzing Mobile Evidence
- PRO Module Final Exam