Full Mission Profile Exercise Development & Support

From basic assessment of perishable skills to full blown validation exercises to assess students readiness, AFC's professionals can develop realistic training scenarios focused to enhance individual, support team and detachment core and supporting tasks.

Training Courses

INTRO TO WINDOWS FORENSIC ANALYSIS (IWFA)

Course Length: 2 days / 16 hours
Course Overview: This course provides attendees with an understanding of the Windows operating system from a forensic analyst’s perspective, by reviewing the internal data structures and interdependencies between a variety of artifacts of system and user activity on Windows systems. Discussion focuses on examinations that are predicated by the “Trojan Defense” (i.e., claims of malware being responsible for observed activity), attempts to locate previously undetected malware, attempts to mask or hide user activities from forensic analysis, as well as any other instances of user activity being brought into question.

FORENSIC TIMELINE ANALYSIS (FTA)

Course Length: 2 days / 16 hours
Course Overview: This hands-on course, led by an instructor who is one of the primary developers and promoters of the timeline analysis technique within the Digital Forensics & Incident Response (DFIR) community, provides a solid foundation in the purpose and practice of conducting a comprehensive timeline analysis of system activity, allowing an analyst to quickly add context to valuable data. Instruction covers the various sources and formats of time stamped data available on Windows systems and the events that can affect those times. Also reviewed are the techniques and free/open source tools available for extracting and compiling this information into a timeline.

FORENSIC REGISTRY ANALYSIS (FRA)

Course Length: 1 day / 8 hours
Course Overview: This hands-on course is led by a recognized leader in the digital forensics field in Registry analysis, and author of Windows Registry Forensics. Instruction provides a thorough understanding of the Windows Registry, from a binary and an analytic perspective. Discussion focuses on the binary structure of the Registry, how operating systems make use of the Registry, as well as free and open source tools for monitoring, examining and extracting pertinent data from the Registry (including deleted keys and values).

Mission Enhancing Seminars & Support Services

ADVANCED BUSINESS ELICITATION (ABE)

Seminar Length: 1-3 days (Pending Client’s Requirements)
Seminar Overview: Applied Fundamentals Consulting (AFC) provides students an opportunity to meet desired industry C-Level Executives and staff in order to develop and /or enhance current skill level tasks. AFC will establish a suitable environment (ranging from one on one instruction/mentoring to full blown social networking events) appropriate for the client’s experience level and needs.

BUSINESS RISK MANAGEMENT/VALIDATION (BRMV)

Seminar Length: 1-3 days (Pending Client’s Requirements)
Seminar Overview: BRMV is designed to identify how social media can be used to target individuals and commercial entities and develop mitigating strategies to protect against the threats. Instruction includes demonstrations and practical applications using several forms of social media e.g. facebook, twitter, linked-in, and google +. In addition, student’s will be shown how the same threats of social media can be used to conduct due diligence and business validation themselves.

DIGITAL IMMUNIZATION AND DETECTION (DID)

Length: TBD (Responsive to Client’s Requirements)
Support Overview: Digital Immunization and Detection provides pre-travel digital forensic immunization, and then post-travel virtual and physical alteration detection for client data systems and physical components, focusing on mitigating security risks and identifying infections when pre-travel mitigation steps were not possible. Expert analysts obtain physical and virtual images of all client devices pre-travel, and then identify/isolate potential malware infections post-travel. This service is tailored to each client’s specific geographic exposure and regionally-specific hostile security risks.

DIGITAL LITTER ANALYSIS (DLA)

Length: Dependent on Client’s Requirement
Support Overview: Digital Litter Analysis deconstructs a device’s digital contents from an offensive forensics perspective. Using digital forensics techniques, AFC writes the story of the device’s user by analyzing the artifacts on the drive. At the end of the analysis, the device’s user reads the created story to see whether the digital litter supports their security and operational needs - ensuring client knows what story their device tells.