Government of Canada
Symbol of the Government of Canada

Network Investigative Techniques Course (NIT)

Purpose

The Network Investigative Techniques Course covers the knowledge and skills necessary to complete searches, seizures and investigations of small, Windows-based computer networks. Students will learn to formulate forensically sound strategies and focus on investigative techniques, procedures and methodologies applicable to the search, seizure and investigation of networks and file servers. Students will learn how to search a network, identify where data is stored, as well as explore different methods for acquiring data.

Objective

By the end of this course, students will be able to:

  • Identify legal issues relevant to network investigations;
  • Formulate a structured approach for investigating a computer network;
  • Identify the physical devices found on a computer network;
  • Physically and logically map a computer network;
  • Identify sources of evidence on networked devices;
  • Prioritize evidence found on networked devices;
  • Triage evidence obtained from a network;
  • Identify coding and inventory issues relevant to network investigations;
  • Identify users of interest on a network/server;
  • Determine user access to server files and folders;
  • Seize configuration settings and log files from workstations, servers and routers; and
  • Seize data from servers and other mass storage devices.

Participant Selection Criteria

Participants must have:

  • Successfully completed the Computer Forensic Analysis Course (CMPFOR)
  • Successfully taken the CompTIA A+ certification exam
  • Successfully taken the CompTIA Network+ certification exam
  • Six months work experience in computer forensics

Participant Assessment

The course consists of interactive lecture sessions and hands-on training exercises provided in the computer classrooms of the Technological Crime Learning Institute.

Participants must be present for and participate in all course modules included in the syllabus in order to gain credit for this course. To obtain a CPC certificate for this course, participants must achieve a grade of 75% or more.

Duration: 10 days

Class Size: A minimum of 12 participants is required to deliver this course, up to a maximum of 20 participants.

Language: This course is offered in English

Location: Canadian Police College, Ottawa, Ontario