Understand how multiple wifi evidential sources and wifi associated technologies can assist within investigations.
This course is designed for learners who need to understand how multiple wifi evidential sources and wifi associated technologies can assist within investigations. Learners will also understand how to conduct router examinations and both indoor and outdoor wifi RF surveys.
Aims
The course is designed to give the required knowledge and basic operation of wifi IEEE 802.11 standard. Learners will understand how to identify devices connected to a network, wifi survey techniques, identify opportunities relating to multiple wifi data sources and develop a technical understanding of how to perform router examinations. The course also assists in understanding more complex data sets and functionality including log interpretation, surveying extended networks and consistent report writing.
Objectives
- Understand wifi network elements and topology.
- Understand what wifi analysis is and why it is conducted in an LE agency.
- Conduct examinations of wifi access points.
- Conduct indoor and outdoor wifi surveys and their logistics.
- Understand the evidential information obtainable from a wifi access point.
- Understand the evidential information obtainable from a wifi device.
- Understand the evidential information obtainable from telecommunications operator.
- Understand evidential wifi information from call data records.
- Understand the terms modulation, beamforming, multipath and multiplexing.
- Understand DHCP data and advanced interpretation of router logs.
- Demonstrate log file interpretation by successful completion of a practical scenario.
- Understand how to investigate wifi mesh networks and networks with extenders present.
- Understand wifi active scanning, interaction of devices with AP and management frames.
- Explain the risk of carrying out active wifi scanning.
- Obtain an understanding of the forensic science regulator and the College of Policing wifi and router SOPs.
Many practical exercises are incorporated into the course which help demonstrate to the learner the logistics and approach in conducting wifi analysis within investigations. Delegates are not expected to bring any survey equipment as this will be provided.
Methods of delivery
The course is trainer-led and classroom-based and includes many practical exercises. It is delivered to a maximum of 10 delegates.
| Qualification eligibility |
Learners in the role of digital media investigator within a dedicated unit or who have responsibilities for digital media investigation as part of their role must have successfully completed the digital media investigator (DMI) Initial learning programme, or another course that provides training to the same level and in the same subjects. |
|---|---|
| Practitioner group |
|
| Duration |
Five days |
| Accreditation |
No
|
| Course contact |
Booking
|