Passware Certified Examiner Training
Become a certified decryption expert in just a week.
Self-paced course on evidence decryption for computer forensics
Passware Certified Examiner (PCE) training is designed specifically for computer forensic professionals.
It provides world-class knowledge and skills to analyze and decrypt encrypted electronic evidence in an easy to follow format.
This online, self-paced course provides forensic examiners with a start-to-finish education on the use of Passware Kit Forensic. During the course, students learn how to detect encrypted evidence, recover passwords for all common file types, analyze memory images, recover passwords for mobile backups, decrypt hard drives, and more.
The course consists of 15 video sessions, varying from 15 to 30 minutes each. At the end of each session, attendees take a “knowledge check” — a simple 3 to 5 question quiz. Participants in this training course may take the exam to receive a Passware Certified Examiner (PCE) designation. Prior knowledge or use of Passware Kit Forensic is not required to take this course.
Course Objectives
- Gain extensive knowledge on encrypted electronic evidence
- Know how to locate, process, and decrypt encrypted files and disks
- Obtain required knowledge to set up password recovery attacks and to create and use custom dictionaries
- Discover how to maximize password recovery performance: hardware acceleration and distributed password recovery
- Understand what encryption artifacts can be extracted from memory images
Course Outline
- Session 1Detecting Encrypted Files
- Session 2File Password Recovery
- Session 3Custom Dictionary and Keyword Lists
- Session 4Types of Attacks Available
- Session 5System and GPU Recommendations
- Sessions 6 & 7Memory Analysis
- Sessions 8 & 9Mobile Forensics
- Session 10Resetting a Windows Admin Password
- Session 11Standalone System
- Sessions 12 & 13Full Disk Encryption
- Session 14Completing the Analysis
- Session 15Batch Recovery & Dictionary Manager