Python for Forensics


 

Using Python to Further Your Digital Forensic Investigations

They say there is no one tool that can do everything during a forensic examination. The solution? Create your own tools!

Learn to create your own mobile device forensic tools with Python Programming. Despite the best efforts of today’s existing forensics tools, they’re unable to support every device and every app. Eventually (if it hasn’t happened already), the data critical to your examination will be passed over by your existing tools. Don’t let it happen! If you’re lucky, you’ve found the data…but now what?

Using Python to target the information you’re seeking can be the most efficient and effective way to search through the data. Our new Python for Forensics course teaches the fundamentals of Python, and offers a catalog of applicable scripts to help the digital forensic examiner with some of today’s most common and challenging apps.

This course is very “hands on” and includes numerous practical exercises. While this course will focus on data obtained from mobile devices, the skills learned will be very similar for working with any type of data (e.g., computer instant messenger logs).

TeelTech Python for Forensics PDF



The course is broken into three major parts:


 

Students Receive:

Students will receive a complimentary copy of Hex Editor Neo Pro to use in class and take home with them.
 


Course Requirements

This course will require a significant amount of typing, and students should be comfortable typing at an average speed. While no programming experience is required, this is an intermediate to advanced course. If you have any questions, please contact us.


Laptop Minimum Requirements

Students will need to bring their own laptops whenever possible. If this is not possible, TeelTech will provide one for you. If you do plan on bringing your own laptop, indicate so on the registration page and please ensure they meet the following requirements.


Laptop Requirements:

  • Windows 7
  • Windows 8.x and 10.x using these instructions
  • macOS with Bootcamp Windows 7
  • macOS with Bootcamp Windows 8.x and Win 10.x using these instructions
  • macOS alone will not work (No Virtual Machines)
  • 8GB RAM (minimum)
  • 100GB storage (minimum)
  • You must have admin rights or have the admin password for software installation.
  • NOTE: ALL Windows updates should be done prior to class
  • External USB 3.0 Storage Device



Course Offerings