Digital Forensics with the AccessData Forensic Toolkit (FTK)

John Sammons (Huntington, West Virginia) is an Assistant Professor at Marshall University teaching digital forensics, electronic discovery, information security, and technology in the Department of Integrated Science and Technology. He is also an adjunct faculty member of the Marshall University Forensic Science Center's graduate program teaching the Advanced Digital Forensics course. Prior to joining the faculty at Marshall, John co-founded Second Creek Technologies, a digital forensics and electronic discovery firm. He is a former Huntington police officer and currently serves as an investigator for the Cabell County (WV) Prosecutor's Office. John is a member of the FBI's West Virginia Cybercrime Task Force. He is also the founder and director of the Appalachian Institute of Digital Evidence (AIDE), a non-profit organization that provides research and training for digital evidence professionals including attorneys, judges, law enforcement, and information security practitioners in the private sector. John is currently a contract instructor for AccessData and is certified as both an instructor and an examiner. John is the author of The Basics of Digital Forensics published by Syngress.

Chapter 1: Digital Forensics
Chapter 2: Tech Foundations
Chapter 3: Windows Registry & File Systems
Chapter 4: FTK Imager
Chapter 5: FTK Examiner: Introduction and Interface
Chapter 6: FTK Examiner: First Steps
Chapter 7: Windows Artifacts
Chapter 8: FTK Basics
Chapter 9: FTK Registry Viewer
Chapter 10: Password Recovery Toolkit