DV200 Digital Video Investigations with DVR Examiner

Description
After completing the three-day course, participants will have the knowledge and skills to acquire data from digital video recorders (DVR) in a secure and forensic manner. Students will learn how to identify and extract hard drives from these devices and acquire forensic images of the data using write-blocker protection. Participants will also learn how to extract data from these images using DVR Examiner and present it to others for casework.

What to Expect
Hear directly from Justin Almanza, Forensic Trainer at Magnet Forensics, about why you should take our Digital Video Investigations with DVR Examiner (DV200) course, what you can expect when you take it, and what kind of real-life experience he brings to the classroom.

Course Prerequisites
None

Course Objectives

MODULE 1: INTRODUCTION AND PRINCIPLES OF DIGITAL EVIDENCE

The learning objectives will be presented along with the expected outcomes during the four days of the course.
The basics of digital evidence handling will be explored, such as hashing, timestamps, and the configuration of scene collection devices.
MODULE 2: UNDERSTANDING DIGITAL VIDEO

Students will learn about the history of digital video formats, including the format and structure of these files.
File formats, file metadata, and the codecs that make up digital video files will be explored.
Upon completing this module, students will be able to successfully identify information about video files and their formats.

MODULE 3: DIGITAL VIDEO STORAGE (DVR SYSTEMS)

This module will focus on how digital video is stored in modern digital video storage or digital video recording systems.
The differences between local storage, cloud storage, and network storage DVR systems will be explained.
Students will learn how to export files natively using DVR systems, as well as how to safely remove and image the internal storage media to capture information.
How to safely disassemble and remove the digital storage hardware from DVR systems will be learned through hands-on exercises.
Hardware write-blockers will be demonstrated with student use to understand how to securely protect drives during the imaging process.

MODULE 4: CREATING CASES IN DVR EXAMINER

DVR Examiner software will be used to create new cases and explore the collected forensic images.
The difference between the different types of scans within DVR Examiner along with the available functions will be explored.
Students will understand the types of scan jobs within DVR Examiner and how to successfully filter and explore videos.

MODULE 5: EXPLORING RECOVERED MEDIA

Incident and location details will be configured with DVR Examiner, as well as reviewing the software's audit log.
Students will learn about clip lists and how to tag and export clips.
Hands-on labs will explore DVR Examiner functionality, including how to split frames, export videos, play proprietary formats within the software, and more.

MODULE 6: WORKING WITH EXTRACTED VIDEOS

Students will learn how to enhance digital video files, as well as the pros and cons of the process.
How to enhance, apply filters, blur, stabilize, and other techniques to improve digital video will be explored.
Hands-on labs will use open-source software to properly modify and enhance digital video files for use in presentations and court cases, including proper documentation.

Additional Information
Who should attend: Participants who are not familiar with the principles of digital forensic analysis
Advanced Preparation: None
Program Level: Beginner level
Field of Study: Computer software and applications
Delivery Method: Internet-based group and live group