Network Investigative Techniques Course
Course details
2024
| Session(s) | Location | Start date | End date |
|---|---|---|---|
| 24-01 English | Ottawa | 2024-04-08 | 2024-04-19 |
| 24-02 Cancelled | Ottawa | 2024-06-03 | 2024-06-14 |
| 24-03 English | Ottawa | 2024-10-28 | 2024-11-08 |
| Tuition |
|---|
| $5,000.00 |
Notes
- Accommodations are offered to course participants. Our rooms are subject to availability and the request must be indicated on the course registration form
- Meal plans are offered to course participants. The specific meal plan must be indicated on the course registration form
- Travel grant funding is available to our non-federal law enforcement agencies
Description
This course provides the knowledge and skills to complete searches, seizures and investigations of small, Windows-based computer networks. In this course, course participants learn to collect information, develop a plan, and anticipate on-site needs before investigating a computer network. Course participants learn effective techniques to ensure the continuity of evidence, to identify location of found evidence, to document the chain of possession, and to identify items in court.
Format and delivery
- Length of course
- 10 days
- Class size
- maximum 20 participants
- Delivery setting
- theoretical and practical components are done in a computer laboratory
Learning outcomes
- Knowledge of legal issues relevant to network investigations.
- Understanding how to formulate a structured approach for investigating a computer network.
- Knowledge of the physical devices found on a network.
- Ability to physically and logically map a computer network.
- Understanding how to identify and locate sources of evidence on networked devices.
- Understanding how to prioritize evidence found on networked devices.
- Understanding how to perform a triage of evidence obtained from a network.
- Knowledge of coding and inventory issues relevant to network investigations.
- Understanding users of interest on a network.
- Understanding how to identify files and folders that specific users are able to access.
- Understanding how to seize configuration settings and log files from both wired and wireless routers.
- Understanding how to seize user and server configuration settings and log files from servers.
- Understanding how to seize files and directories from servers and mass storage devices.
- Understanding how to identify the source of Virtual Private Servers data and the methods of acquiring its digital evidence.
- Understanding techniques used to capture email from a Microsoft Exchange Server.
Eligibility and mandatory requirements
- This course is offered police and law enforcement officers.
- Registrants must have completed: the Computer Forensic Examiners (CMPFOR) course.
- Acceptance or refusal in the course is at the discretion of the Canadian Police College.
Assessment
- Success in the course is based on participation and completion of all required assignments.
- Various evaluation methods are used, including an assessment of a practical scenario, an assignment, quiz, final written exam, and final practical exam.
- Re-testing or re-evaluation is conducted at the discretion of the course instructor.
Contact
For more details or other information about the course, please email cpc_registrar-registraire_ccp@rcmp-grc.gc.ca.
- Date modified: