NDG Forensics v2

NDG Forensics v2 labs provide hands-on experience conducting a variety of forensics practices. These skills can help prepare trainees for a variety of IT positions, including: Computer Forensic Analyst, Digital Forensic Examiner, Digital Forensics Incident Response, and Security Administrator.

NDG Forensics v2 labs are supported in NETLAB+ using the NDG Forensics v2 Pod.

Supported Labs

Lab Title
1 Creating a Forensic Image
2 Live Acquisition
3 Live Forensics
4 Registry Forensics
5 File Systems
6 Keyword Search and Analysis
7 Data Carving
8 Metadata and Link File Analysis
9 Recycle Bin Forensics
10 Steganography and Alternative Data Streams
11 Picture File Analysis
12 Email Analysis
13 Internet Browser Forensics
14 Timeline Analysis
15 IoT Forensics
16 Mobile Forensic Analysis
17 Log Capturing and Interpretation
18 Pagefile Analysis
19 Password Cracking
20 File Hashing and Hash Analysis
21 Chain of Custody
Enabling the Labs

To enable the NDG Forensics v2 labs, install the NDG Forensics - v2 course using the Course Manager. See the Course Manager section of the NETLAB+ VE Admin Guide for details. The course content will then be available to be added to classes.

Using the Labs

Always select the correct lab exercise for the lab being performed. Students or teams should schedule the correct lab exercise from the catalog. NETLAB+ will only show those labs for which the required pod type is available. A lab that works on different pod types may appear more than once if your system is so equipped. Instructors should select the correct lab from the Exercise tab during instructor-led lab reservations. This can be done as many times as needed during the reservation.