Scribd
Upload
65 views2 pages

ACE Study Guide 2017-WEB

Uploaded by

muhammad fahad
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
65 views2 pages

ACE Study Guide 2017-WEB

Uploaded by

muhammad fahad
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 2

www.accessdata.

com

ACE Study Guide


**The below study guide is designed to list the knowledge topics the examiner needs
to be familiar with to successfully pass the exam. Also, listed at the bottom, are the
topics of practical ability an examiner will need to pass the exam.

FTK Imager FTK Examiner Application/Case


• Encryption of image files Management Window

• Image mounting • UTK tool integration

• File Hash List creation o Registry Viewer from within FTK

• RAM Capture o PRTK/DNA from within FTK

• Image creati n capabilities and formats • KFF hash importing

• Drive identification by Imager • Evidence processing options

• Image Summary output details • Additional analysis abilities


• Bookmarking

Registry Viewer • Index Searching

• Difference between Add to Report and Add to Report • Live Searching


with Children • Interface
• Common Areas oT
 ab information and abilities to view data on
• Registry Viewer report creation specific tabs

• Searching wi hin a registry file using Registry Viewer o Dropdown menu options

• Interface/pane descripti ns and capabilities o Right click menu options


o File Content pane abilities

PRTK (Password Recovery Tool Kit) o Toolbars

• Golden Dictionary • Ability to describe concepts described in question


text, graphic or displayed video
• Attack types
• Case Management Window abilities
• Profiles and profile creation
• Processing Profile Creation
• Dictionary generation
• Data carving abilities and output
• Custom profile creation
• FTK Reporting
• Steps for adding files for decryption
• FTK user assignment to cases and ability permissions
• Filtering
Practical Usage of FTK abilities
Examiners will need to be able to do the following
functions in FTK, RV, Imager, PRTK. Examiners should
also have basic to moderate forensic knowledge to
be able to understand what artifacts are being asked
about and how to leverage FTK, RV, Imager or PRTK to
find those artifacts.
• View and analyze Registry files
• Decrypt files using PRTK
• Use Live and Index Searching
• Run all tab functionality
• Use the KFF
• Apply, create and/or import filters and column
settings
• Know how to find OCR data, Geolocation Data,
and Metadata

Whether it’s for investigation, litigation or compliance, AccessData® offers industry-leading solutions that put the power of forensics in your
hands. For 30 years, AccessData has worked with more than 130,000 clients in law enforcement, government agencies, corporations and
law firms around the world to understand and focus on their unique collection-to-analysis needs. The result? Products that empower faster
results, better insights, and more connectivity. For more information, visit www.accessdata.com

Visit us online: Global Headquarters North American Sales International Sales


www.accessdata.com +1 801 377 5410 +1 800 574 5199 +44 20 7010 7800
588 West 300 South Fax: +1 801 765 4370 [email protected]
Lindon, Utah [email protected]

©2017 AccessData Group, Inc. All Rights Reserved. AccessData is a registered trademark owned by AccessData in the United States and other jurisdictions and may not be used
without prior written permission. All other marks and brands may be claimed as property of their respective owners. 082017

You might also like