Notifications
Clear all

NTI Training

12 Posts
4 Users
0 Likes
1,636 Views
(@jimsmith)
Posts: 2
New Member
Topic starter
 

Does anyone have any experience with NTI's training? How does their training compare to EnCase and others?

They have a new tool they are promoting heavily and I wonder if anyone has any feedback on this as well. It is called Net Threat Analyzer and is sold to probation and parole officers.

thanks.

 
Posted : 03/09/2004 10:36 pm
Jamie
(@jamie)
Posts: 1288
Moderator
 

Hi Jim,

Welcome to Forensic Focus!

Do you have any more information on Net Threat Analyzer (links, etc.)? What does it do? I'm intrigued by the link to parole/probation officers.

Kind regards,

Jamie

 
Posted : 04/09/2004 9:24 am
(@jimsmith)
Posts: 2
New Member
Topic starter
 

I saw a demonstration of the product at a recent tradeshow in St. Louis called the International Association for Identification (IAI). It appears to work by running on an initial boot and then write a list of URL's on a cd or floppy which is then reviewed seperately with special viewer software.

I just bought a copy and plan on running it this weekend.

Here is the URL that describes the product. It is NTA Stealth.

http://www.forensics-intl.com/whatsnew.html

I'm not sure if I want to sit through their training too.

Jim

 
Posted : 04/09/2004 12:44 pm
Jamie
(@jamie)
Posts: 1288
Moderator
 

Thanks, Jim. I've taken a look at the product description on the NTI site. I'd be *very* interested in what you think once you've had a chance to review it, especially with regard to the claim "There is no other program that does what this program does!"

Jamie

 
Posted : 07/09/2004 6:45 pm
 Eddi
(@eddi)
Posts: 9
Active Member
 

Hi everyone!

Hope this doesn't come too late.

I had the pleasure to enjoy the NTI training course. A good introduction into the forensics world, and lots of hand on sessions.

Most of the training is done in the DOS world, so it's nothing for mouse-addicts. Students also get a lot of helpful (DOS-) tools.

NTA will is one of the programs, that I use on a regular base. It will extract all references to Internet-sites, like e-mail addresses and URLs from a file, like a dd-image or a pagefile. Also NTA identifies certain keywords, that could be helpful in an investigation.

IMHO the only real drawback is, that the list of (English) keywords is hardcoded into the program.

HTH
/Eddi

 
Posted : 21/09/2004 1:12 pm
Jamie
(@jamie)
Posts: 1288
Moderator
 

Thanks Eddi, that's interesting.

One question…

IMHO the only real drawback is, that the list of (English) keywords is hardcoded into the program

Are you saying there's no way to modify this list? That would seem to be a huge drawback during an investigation, or am I missing something obvious here? (Wouldn't be the first time!)

Cheers,

Jamie

 
Posted : 21/09/2004 8:16 pm
 Eddi
(@eddi)
Posts: 9
Active Member
 

IMHO the only real drawback is, that the list of (English) keywords is hardcoded into the program

Are you saying there's no way to modify this list?

Yes, that's what I'm saying. No options, no loadable wordlists.
Take it or leave it.

I for my part take it all the time.

Cheers
/Eddi

 
Posted : 30/09/2004 6:09 pm
hogfly
(@hogfly)
Posts: 287
Reputable Member
 

I'm heading to Oregon for training at NTI next week. Should be a lot of fun! I'll give a review when I return.

 
Posted : 07/10/2004 1:05 am
Jamie
(@jamie)
Posts: 1288
Moderator
 

Sounds good, looking forward to it!

Cheers,

Jamie

 
Posted : 07/10/2004 4:39 pm
hogfly
(@hogfly)
Posts: 287
Reputable Member
 

Just got back tonight from the training in Oregon and all I can say is WOW.

Having guys like Mike Anderson and Joe Enders instructing adds instant credibility to the course. The course was great and covered a lot of material in a short amount of time. NTA is nothing short of an awesome utility. The search terms may be hardcoded, but updates are relatively frequent. The course covered more than just forensic science. They covered the actual process of creating safety nets for investigations, and a bit of profiling and criminology, and coming from guys that have over 20 years experience in the field each I tend to believe that they know what they are saying. They also teach documentation methods that leave attorneys with little ammunition, and how to answer certain questions.
I'm considering the Expert witness course.

I'd recommend NTI to anyone that asked. I don't know how they compare to Encase training…but offhanded I'd say they do a better job because they don't just teach you how to use a proprietary tool.
The exam was cool, nothing like recovering your own certificate :), and the schwag is nice too.

 
Posted : 24/10/2004 5:31 am
Page 1 / 2
Share: