The program is designed to be about 70% hands-on and will give you plenty of time to practice and learn the skills necessary to conduct forensic examinations. There are a maximum of 9 students per instructor, so there will be plenty of individual instructor time while you are "at the keyboard". This intensive training course in computer forensic examinations is given regularly during the year. The computer examiner course will teach you the core forensic procedures that will apply to examining any operating system or file system. During our course, we provide instruction on the logical structures of the FAT file system utilized by DOS and Windows 9.x and the NTFS logical structures utilized by Windows NT, 2000 and XP. The NTFS section provides instruction about the partition table, the boot record, bitmaps, the root directory, the MFT, headers, attributes, resident files, non-resident files, run lists, etc.