Join Us!

Notifications
Clear all

NTI Training  

  RSS
jimsmith
(@jimsmith)
New Member

Does anyone have any experience with NTI's training? How does their training compare to EnCase and others?

They have a new tool they are promoting heavily and I wonder if anyone has any feedback on this as well. It is called Net Threat Analyzer and is sold to probation and parole officers.

thanks.

Quote
Posted : 03/09/2004 11:36 pm
Jamie
(@jamie)
Community Legend

Hi Jim,

Welcome to Forensic Focus!

Do you have any more information on Net Threat Analyzer (links, etc.)? What does it do? I'm intrigued by the link to parole/probation officers.

Kind regards,

Jamie

ReplyQuote
Posted : 04/09/2004 10:24 am
jimsmith
(@jimsmith)
New Member

I saw a demonstration of the product at a recent tradeshow in St. Louis called the International Association for Identification (IAI). It appears to work by running on an initial boot and then write a list of URL's on a cd or floppy which is then reviewed seperately with special viewer software.

I just bought a copy and plan on running it this weekend.

Here is the URL that describes the product. It is NTA Stealth.

http://www.forensics-intl.com/whatsnew.html

I'm not sure if I want to sit through their training too.

Jim

ReplyQuote
Posted : 04/09/2004 1:44 pm
Jamie
(@jamie)
Community Legend

Thanks, Jim. I've taken a look at the product description on the NTI site. I'd be *very* interested in what you think once you've had a chance to review it, especially with regard to the claim "There is no other program that does what this program does!"

Jamie

ReplyQuote
Posted : 07/09/2004 7:45 pm
Eddi
 Eddi
(@eddi)
New Member

Hi everyone!

Hope this doesn't come too late.

I had the pleasure to enjoy the NTI training course. A good introduction into the forensics world, and lots of hand on sessions.

Most of the training is done in the DOS world, so it's nothing for mouse-addicts. Students also get a lot of helpful (DOS-) tools.

NTA will is one of the programs, that I use on a regular base. It will extract all references to Internet-sites, like e-mail addresses and URLs from a file, like a dd-image or a pagefile. Also NTA identifies certain keywords, that could be helpful in an investigation.

IMHO the only real drawback is, that the list of (English) keywords is hardcoded into the program.

HTH
/Eddi

ReplyQuote
Posted : 21/09/2004 2:12 pm
Jamie
(@jamie)
Community Legend

Thanks Eddi, that's interesting.

One question…

IMHO the only real drawback is, that the list of (English) keywords is hardcoded into the program

Are you saying there's no way to modify this list? That would seem to be a huge drawback during an investigation, or am I missing something obvious here? (Wouldn't be the first time!)

Cheers,

Jamie

ReplyQuote
Posted : 21/09/2004 9:16 pm
Eddi
 Eddi
(@eddi)
New Member

IMHO the only real drawback is, that the list of (English) keywords is hardcoded into the program

Are you saying there's no way to modify this list?

Yes, that's what I'm saying. No options, no loadable wordlists.
Take it or leave it.

I for my part take it all the time.

Cheers
/Eddi

ReplyQuote
Posted : 30/09/2004 7:09 pm
hogfly
(@hogfly)
Active Member

I'm heading to Oregon for training at NTI next week. Should be a lot of fun! I'll give a review when I return.

ReplyQuote
Posted : 07/10/2004 2:05 am
Jamie
(@jamie)
Community Legend

Sounds good, looking forward to it!

Cheers,

Jamie

ReplyQuote
Posted : 07/10/2004 5:39 pm
hogfly
(@hogfly)
Active Member

Just got back tonight from the training in Oregon and all I can say is WOW.

Having guys like Mike Anderson and Joe Enders instructing adds instant credibility to the course. The course was great and covered a lot of material in a short amount of time. NTA is nothing short of an awesome utility. The search terms may be hardcoded, but updates are relatively frequent. The course covered more than just forensic science. They covered the actual process of creating safety nets for investigations, and a bit of profiling and criminology, and coming from guys that have over 20 years experience in the field each I tend to believe that they know what they are saying. They also teach documentation methods that leave attorneys with little ammunition, and how to answer certain questions.
I'm considering the Expert witness course.

I'd recommend NTI to anyone that asked. I don't know how they compare to Encase training…but offhanded I'd say they do a better job because they don't just teach you how to use a proprietary tool.
The exam was cool, nothing like recovering your own certificate :), and the schwag is nice too.

ReplyQuote
Posted : 24/10/2004 6:31 am
Jamie
(@jamie)
Community Legend

Thanks for the update and glad to hear you enjoyed the course. Other than Safeback I haven't used any NTI software but I'm now quite intrigued by NTA Stealth. Unfortunately I couldn't open the pdf user guide they have on their website (I will try again later, though).

Do they offer any training Europe, do you know?

Jamie

ReplyQuote
Posted : 24/10/2004 6:21 pm
hogfly
(@hogfly)
Active Member

Hey Jamie,
I don't think they offer training elsewhere, but you could probably ask them. I think most people are willing to travel to their training(We had one guy in the course from citigroup UK.). it makes having expense accounts worthwhile 😀

ReplyQuote
Posted : 24/10/2004 11:33 pm
Share: