5 Basic Data Recovery and Analysis. Intermountain West Regional Computer Forensic Laboratory, Salt Lake City, UT (5 days) Nov 2005 FTK Boot Camp, Access Data, Hamilton, NJ. (3 days) Jan 2006 A+ Certification, Intermountain West Regional Computer Forensic Laboratory, Salt Lake City, UT (10 days) Feb 200

tered organization and registered owner, which are user input data. He is expected to explain that Government Exhibits 405 and 419 were generated by Access Data AD Lab. The Government further anticipates that will testify that he examined certain exhibits contained on the devices marked for identification

made a bit for bit copy of the clone; copies to storage area network for processing • To make an image, have several tools available; FTK made by Access Data; also have FBI created product; also have physical devices that are duplicators (TX1 made by Tableau) to create image files • Hard drive is elect