Format: 90-minute live online session
Level: Foundational to Intermediate
Instructor: James Eichbaum
Language: English
Price: $195 ex VAT per participant (non-binding expression of interest)
Mode: Live + Interactive Q&A
This focused micro-course offers a hands-on introduction to GPT partition structures in forensic investigations. Ideal for examiners, analysts, or IT professionals with basic hex familiarity, this live session covers how modern disks are structured using the GUID Partition Table (GPT) and how those structures can be validated, analyzed, and repaired in forensic contexts.
By the end of this session, participants will be able to:
Registration is now open.
This is a non-binding expression of interest. We’ll contact you with more details and scheduling options.
Course: Understanding SQLite WAL and SHM
Description: This micro-course provides a focused walkthrough of how Write-Ahead Logging (WAL) and Shared Memory (SHM) work in SQLite. You'll learn to interpret frame changes, track database activity over time, and understand how these files impact forensic timelines. A great fit if you're working with app databases that show partial or inconsistent records.
Course: Exploring SQLite Internals
Description: A deep dive into the internal structure of SQLite databases — from headers and page formats to freeblocks and overflow data. This course is ideal if you need to manually examine raw databases, validate tool output, or recover deleted records. Perfect for forensic examiners looking to sharpen their low-level SQLite skills.
Be the first to hear about new training opportunities, free tools, case-based blog posts, and practical insights. Our monthly newsletter is built to help you learn faster, solve cases smarter, and keep up in a field that never stands still.
Fill in your email to sign up.