The promotion code xwfpromonobook is not valid for this course. ×

The X-Ways Forensics Practitioner's Guide Online & On-Demand Course

The only online and on demand course on the most powerful digital forensics software available: X-Ways Forensics

About this course

 

The X-Ways Forensics Practitioner's Guide Online Course is based on the book of the same name as well as the software.   Your presenter, Brett Shavers, has been a long time advocate and user of X-Ways Forensics since its development in 2004 (and since 2002 with WinHex).  Brett is the author of the X-Ways Forensics Practitioner's Guide with co-author Eric Zimmerman.  Brett is a former law enforcement investigator and task force officer, and has investigated criminal cybercrime cases for over a decade as well as being retained as a court appointed special master in civil litigation matters.  In nearly every assigned or retained case, Brett has used X-Ways Forensics as the primary investigative tool.

This course  takes the X-Ways Forensics  beginner to a higher level of understanding and competence with X-Ways Forensics up to version 19.  Whether you have just started to use X-Ways Forensics or use it regularly, you will find that this online course gives information on "how to use it" in simple, direct, and easy to understand language.    

The X-Ways Forensics Practitioner's Guide won the 2014 Forensic 4:cast Awards as the best forensic book of the year.   If you read the book, this course compliments all that you have read but shows you with videos and explanations.    If you have an X-Ways Forensics dongle and have not had any training, you are missing out on something neat; you just don't know what it is.   Take this course and find out.

 

award

Completing the course gives you a printable certificate that you can only receive by completing the entire course (every lesson must be viewed, no skipping).

Do not share your login credentials!  Not only do the people you share your login credentials not get any record of training, but it is piracy, which is a crime.

Curriculum

  • Preview
    Introduction
  • Setting Up X-Ways Forensics
  • Installing X-Ways Forensics
  • The XWF Dongle
  • System Requirements
  • Keeping up with XWF
  • The X-Ways Forensics Interface
  • Introduction to the X-Ways Forensics Interface
  • The Toolbar
  • The Main Menu
  • The Case Data Window
  • Directory Browser
  • The Mode Buttons
  • General Options
  • Start Center
  • Filters and the Directory Browser
  • Create a New Case
  • Creating a Case
  • Add Evidence
  • Forensic Collection of Evidence (Imaging, Cloning)
  • Managing Imaging Speeds
  • Image Formats
  • Expert Witness Format Image (.e01)
  • Skeleton Image
  • Raw Image (dd, 001)
  • Cleansed Images
  • Cloning
  • Reverse Cloning/Imaging
  • Containers
  • Live Imaging
  • Reconstructing RAID Systems
  • Memory Analysis
  • The Hash Database
  • Hash Database
  • WinFE & X-Ways Forensics
  • WinFE & X-Ways Forensics
  • Write Protect Tool for WinFE
  • Download the Mini-WinFE Builder App
  • Processing Evidence
  • Volume Snapshot
  • Email
  • Pictures and Videos
  • Searches (keyword, GREP)
  • Searching
  • Registry Viewer
  • Registry Viewer
  • Reporting
  • Recover/Copy Files
  • Events and Timelines
  • Exporting Lists
  • Reporting
  • Workflow Examples
  • Workflow - Email
  • Workflow - Pictures and Videos
  • Workflow - Triage/Preview
  • Workflow - eDiscovery
  • Workflow - Disk Imaging
  • Putting it All Together
  • X-Ways Forensics 'Extras'
  • Multi-Users
  • XWF Shortcuts
  • X-Tensions and 3rd Party Tools
  • Mounting as Drive Letter
  • WinHex and XWF Differences
  • Extra Tidbits for the X-Ways Forensics Club
  • Teaching Forensics with X-Ways Forensics
  • Answers to XWF Questions
  • Finding Answers to XWF Problems

About this course

 

The X-Ways Forensics Practitioner's Guide Online Course is based on the book of the same name as well as the software.   Your presenter, Brett Shavers, has been a long time advocate and user of X-Ways Forensics since its development in 2004 (and since 2002 with WinHex).  Brett is the author of the X-Ways Forensics Practitioner's Guide with co-author Eric Zimmerman.  Brett is a former law enforcement investigator and task force officer, and has investigated criminal cybercrime cases for over a decade as well as being retained as a court appointed special master in civil litigation matters.  In nearly every assigned or retained case, Brett has used X-Ways Forensics as the primary investigative tool.

This course  takes the X-Ways Forensics  beginner to a higher level of understanding and competence with X-Ways Forensics up to version 19.  Whether you have just started to use X-Ways Forensics or use it regularly, you will find that this online course gives information on "how to use it" in simple, direct, and easy to understand language.    

The X-Ways Forensics Practitioner's Guide won the 2014 Forensic 4:cast Awards as the best forensic book of the year.   If you read the book, this course compliments all that you have read but shows you with videos and explanations.    If you have an X-Ways Forensics dongle and have not had any training, you are missing out on something neat; you just don't know what it is.   Take this course and find out.

 

award

Completing the course gives you a printable certificate that you can only receive by completing the entire course (every lesson must be viewed, no skipping).

Do not share your login credentials!  Not only do the people you share your login credentials not get any record of training, but it is piracy, which is a crime.

Curriculum

  • Preview
    Introduction
  • Setting Up X-Ways Forensics
  • Installing X-Ways Forensics
  • The XWF Dongle
  • System Requirements
  • Keeping up with XWF
  • The X-Ways Forensics Interface
  • Introduction to the X-Ways Forensics Interface
  • The Toolbar
  • The Main Menu
  • The Case Data Window
  • Directory Browser
  • The Mode Buttons
  • General Options
  • Start Center
  • Filters and the Directory Browser
  • Create a New Case
  • Creating a Case
  • Add Evidence
  • Forensic Collection of Evidence (Imaging, Cloning)
  • Managing Imaging Speeds
  • Image Formats
  • Expert Witness Format Image (.e01)
  • Skeleton Image
  • Raw Image (dd, 001)
  • Cleansed Images
  • Cloning
  • Reverse Cloning/Imaging
  • Containers
  • Live Imaging
  • Reconstructing RAID Systems
  • Memory Analysis
  • The Hash Database
  • Hash Database
  • WinFE & X-Ways Forensics
  • WinFE & X-Ways Forensics
  • Write Protect Tool for WinFE
  • Download the Mini-WinFE Builder App
  • Processing Evidence
  • Volume Snapshot
  • Email
  • Pictures and Videos
  • Searches (keyword, GREP)
  • Searching
  • Registry Viewer
  • Registry Viewer
  • Reporting
  • Recover/Copy Files
  • Events and Timelines
  • Exporting Lists
  • Reporting
  • Workflow Examples
  • Workflow - Email
  • Workflow - Pictures and Videos
  • Workflow - Triage/Preview
  • Workflow - eDiscovery
  • Workflow - Disk Imaging
  • Putting it All Together
  • X-Ways Forensics 'Extras'
  • Multi-Users
  • XWF Shortcuts
  • X-Tensions and 3rd Party Tools
  • Mounting as Drive Letter
  • WinHex and XWF Differences
  • Extra Tidbits for the X-Ways Forensics Club
  • Teaching Forensics with X-Ways Forensics
  • Answers to XWF Questions
  • Finding Answers to XWF Problems