Computer forensics is a relatively new professional endeavor within the computer science field. Little more than three decades old, it has garnered increasing attention in recent years due to an unusually high earning potential that tends to be almost immune from interstate, let alone overseas, competition. Computer forensics is the process of acquiring computer based information for use in legal proceedings or formal debate through a detailed or careful search. Legal proceedings normally refer to criminal or civil court trials, which are local in nature and therefore more effectively served by local examiners. Computer forensics, which was initially restricted to law enforcement officers, has more recently been practiced by those without law enforcement training. As such, it is increasingly popular among other computer professionals whose job prospects have been adversely affected by global competition.

Once you’ve decided you’re ready to embark on a career in computer forensics, enroll in our 100-hour Forensic Examiner online course through participating universities and colleges by selecting . Classes occur from Monday through Thursday. Morning classes meet from noon to 2:10 p.m. and evening classes from 7:00 p.m. to 9:10 p.m.; all times are US Central. If you’ve completed our 90/100-hour computer forensics training, consider taking our online Court/Legal Issues laboratory; scheduling is subject to the availability of instructing attorneys. The Court/Legal Issues Laboratory affords students the unique opportunity to experience courtroom examination and cross examination by a practicing attorney.

The twelfth week of the 100-hour examiner course is also available as a separate course. The newly developed sub-course multimedia interface is depicted left. No prerequisites are required for the 8-hour Court/Legal Issues sub-course, which is held during the last week of the scheduled Examiner afternoon and evening courses. Classes are held Monday through Thursday. Afternoon classes meet from noon to 2:10 p.m. Evening classes meet from 7:00 to 9:10 p.m. All times are US Central; daylight saving time may apply. Students receive the NIJ Mock Trial DVD by US Mail. A web cam is recommended for use during the last day of class. Select to register for fall and winter semesters through the University of Texas.

Finally, if you manage or interface with computer forensics examiners, our 8-hour  Computer Forensics Introduction/Business course may be just what you’re looking for. This course is taught online or on-site by prior arrangement. Contact CompuForensics for additional information.

Established in 1998, CompuForensics has become increasingly popular among law enforcement, government intelligence and corporate security professionals. Previously restricted to full-time government employees or a select group of corporate security investigators, this high quality computer forensics training is now available to the general American public through nationally renowned and regionally accredited state universities and colleges. Those successfully completing at least 70% of scheduled classes, including a comprehensive forensics case study, are rewarded with a certificate signed by a dean or comparable official. Although designed as a 10.0 CEU (Continuing Education Units) university course with Pass/Fail grading, a proctored written examination is available for those requiring a letter grade. Course graduates can also elect to have their contact and training information listed on the Analysis page of this website.

Depicted to the right is the new user friendly web based video access interface on our multimedia CompuPic.Net password protected 100-hour Examiner course website. The student has access to this site for the entire 12-week period, including web compatible read-only videos. Each large green button in the left frame corresponds to a Flash implemented MS Power Point presentation augmenting live instruction via Skype VOIP (Voice Over Internet Protocol). In addition to live sessions, instructor audio recordings may be accessed via blue buttons. Audio recordings are routinely made upon notification that a student will not be present for the live session. Alternatively, students can attend live lecture sessions via a land line or cellular telephone when unable to more fully participate. Telephone conference connections are facilitated via Skype or GoToMeeting.

The live online 100-hour Examiner course is restricted to no more than a dozen students. Classes tend to be smaller still, affording an unparalleled student-teacher ratio. Although scripted exercises are designed for independent use, the instructor is available should the student require immediate assistance during scheduled laboratory exercises. The Court/Legal Issues course may be slightly larger, however, benefits from the improved interaction are afforded by GoToMeeting.

The 12-Week Forensic Examiner course is designed to equip government and private investigators/analysts with the skills needed to safely locate and secure computer evidence at the search site as well as to conduct subsequent off-site analysis. Select to download a detailed listing of instructional topics contained in this 100-hour course. Linux, the world's most powerful operating system, is employed to more safely and effectively analyze Windows systems, including Windows 3.x, 9.x, ME, 2000, XP, Vista and Windows 7. This technique, increasingly used in the forensics community, was pioneered by the Department of Defense in the late 1990s. Frequently asked questions and a sample video interface is available by selecting the Questions button at the top of this page. Prospective students are also invited to contact the instructor by telephone or email.

Analysis is taught using Windows and Linux. Code Weaver's CrossOver for Linux allows many Windows applications and forensic tools to run inside of SuSE Linux. While OpenSuSE Linux can block any inadvertent modification (writes) to evidentiary partitions, ultimate use of a hardware write-block away from the search site is recommended for Windows and OpenSuSE analysis. Knoppix Live Debian Linux is employed to safely and efficiently conduct the preliminary forensic analysis of Windows computers at the search site without resort to hardware write-blocks. Use of hardware write blocks used to safely use Windows to analyze evidentiary partitions may be simulated during the course. In addition to Computer forensics analysis, students are extensively instructed in business and employment issues, Internet crime, legal issues and courtroom testimony as well as technical report writing.

The instructor possesses professional training and experience second to none. Possessing bachelor and masters university degrees, the instructor additionally attended special agent academies for the Department of the Treasury, US Customs Service, Naval Criminal Investigative Service and USAF Office of Special Investigations. Applicable technical training was principally hosted by the Treasury Department and Central Intelligence Agency. A former field grade intelligence officer with the USAF and US Army, he is a decorated Vietnam air combat veteran. Retiring at age 53 with a quarter century of federal law enforcement experience, he served as field agent, agent supervisor and headquarters staff, including service as a national program manager for computer forensics. In addition to well over a decade of US Government computer forensics experience, he has taught computer forensics since 1999 at nine regionally accredited universities or colleges in the Midwest and South. Press for a one-page instructor resume.

12-Week Forensics Examiner Student Background
All online students should be fluent in English. All lectures, laboratories and videos are provided solely in English. The online format does not lend itself well to those with hearing or sight disabilities. Eleven week examiner students should minimally have prior experience in loading the Microsoft Windows operating system and applications, copying/moving/linking files using Windows Explorer, and be familiar with the use of classic menu options. Prior use of basic Command Prompt utilities such as format, change directory, rename, delete and copy is also required. A+ or comparable computer hardware background is minimally desirable. Students should be familiar with Windows or third party drive partitioning software prior to beginning the course. Prior experience with Linux or computer forensics is not required.

12-Week Examiner Computer System Requirements

Audio Headset - Use of an ear phone with an integrated microphone is required to avoid background noise and echo effects. Suitable head phones with integrated microphones are widely available for as little as $20. Student microphones should be muted when not used for talking.