Date: Mar 20-24, 2023,
Online class hours (including breaks):
US Central Time (Chicago) 7:30am - 3:30pm
Each individual course module for this training event needs to be confirmed by X-Ways. If the minimum number of attendees is reached, a module will be confirmed. If some modules are confirmed, and others are not, you will receive a refund for cancelled modules. If the entire event is not confirmed, you will receive a full refund. The decision is made no later than 7 days prior to the first day of class (usually earlier), and if you are signed up you will be notified immediately. Status right now: confirmed
How it works: Attendees will connect using the GoToMeeting application (free). Questions can usually be asked orally or in the chat window. All verbal and textual interchange is between all attendees and the instructor. You may be asked to share your screen with the instructor if you run into problems. To facilitate a virtual classroom environment more akin to that in a real one, course participants are asked to join the meeting with a webcam and microphone / headset, making them both visibly and audibly present in the course. X-Ways will not record the class. Participants are also asked to refrain from any voice or video recordings, for both copyright and privacy reasons.
Further details about required downloads (X-Ways Forensics software, images, training manuals, ...) will be provided in advance. Please make sure you will be undisturbed for the duration of the training!
Training provided by X-Ways Software Technology AG, Germany, the makers of WinHex and X-Ways Forensics.
Preconditions: You already have a working knowledge of computer forensics in general and know your way around X-Ways Forensics. This course uses X-Ways Forensics to examine the underlying structures of file systems and partitioning schemes, but does not deal with the use of the product as such, except the first module which includes an introduction to navigating offsets and sectors in raw data, employing the Data Interpreter and templates to view dates and numbers from the raw hex data. Attendees without a solid unterstanding of how to use the Data Interpreter and templates, are definitely recommended to attend the first module of this course, as all subsequent modules will simply assume this as given.
Important: You need to use your own computer running Windows 7 or newer. Please have MS Excel or something equivalent installed. You need to be connected to the Internet. Ideally you will use 2 computers or 2 screens, one for the presentation and one to run the application. A headset would be perfect to have so that you can give spontaneous oral feedback and ask questions, and do not transmit ambient noise as an ordinary webcam microphone would. We offer a temporary license for X-Ways Forensics with BYOD or BYOD+ for the duration of the class in case you don't have a dongle at hand.