nUnderstand
operational guidelines applied before, during and after a search warrant.
nBecome proficient in the:
nUse of forensic tools to locate and document computer evidence at and away from computer site;
nUse of Norton Ghost to capture and restore fixed disk images; and
nPreparation and documentation of computer evidence.
nConsider concepts and methodologies associated with technical report writing and in-depth analysis.