Attendees will learn the basics of the FTK Imager Tool by AccessData. Given a practice image, they will parse through an imagine machine to find evidence and flags for a hypothetical case.

*Laptops will be provided