Students attending IACIS Training Events this year will all receive a printed copy of the “Lock and Code” Forensic Computer Examiner Quick Reference Guide (Revision 1.0). This guide has been developed by Lock and Code in consultation with IACIS and will provide the students with a compact, handy and easy to use reference guide which will prove invaluable during classroom training exercises and outside the classroom when completing the CFCE process.
The guide (as above pictured) is C6 paper size, portrait and spiral bound on the short edge. The individual pages are laminated for durability. Content wise, It contains 12 pages of NTFS content including a breakdown of commonly encountered $MFT attributes. There are four pages dedicated to FAT including short and long filename breakdowns. An ASCII table complete with conversions to Decimal, Hexadecimal, Octal and Binary has been included. There are also file location guides for the Windows Registry and Internet Explorer which visually represent exactly where the many, many hive files and index.dat files reside on a Windows system. Finally, the back page has the IACIS first responder guide for handling electronic evidence.
Revision 2.0 is already in the planning stage so please forward any suggestions for additional content to quickref@lockandcode.com.
Printed copies are available for purchase through this web site right now: Booklet Purchase.
Computer Forensic Examiner
Quick Reference Guide Version 1.1
Sample
