N. America Central Time (Chicago) 7:30am - 3:30pm
N. America Eastern Time (New York, Toronto) 8:30am - 4:30pm
UTC 12:30 - 20:30
British/Irish Summer Time (London, Dublin) 13:30 - 21:30
Central European Time (Paris, Brussels, Berlin) 14:30 - 22:30
Attendees in other time zones are also welcome. The main break is from US Eastern Time 12:30 till 1:15pm, suitable for a quick lunch, tea, dinner or power nap.

Each individual course module for this training event needs to be confirmed by X-Ways. If the minimum number of attendees is reached, a module will be confirmed. If some modules are confirmed, and others are not, you will receive a refund for cancelled modules. If the entire event is not confirmed, you will receive a full refund. The decision is made no later than 7 days prior to the first day of class (usually earlier), and if you are signed up you will be notified immediately. Status right now: confirmed

You can either book the entire week (incl. volume discounts for multiple attendees in a single booking) or individual modules (separate bookings for each attendee required in this case, no volume discounts available, but price per module decreases with each additional module booked). Attendees need to be approved by X-Ways. Bookings involving freemail accounts will be approved for existing, known customers only (provide your organization's name as part of the booking if in doubt).

To book the entire week (=all ten modules), for one or more attendees, use the following links:

To book only some of the modules (note preconditions below!), please add the total number of modules required and order that number using the following links (for more than one attendee, separate bookings are required). Please notify us as soon as possible which exact modules you are wishing to book, as we have to assign seats on each module on a first-come, first served basis. To do so, simply send us an e-mail to training@x-ways.com. Thank you!

Please follow the above links to see the prices. Rates may change or become unavailable at any time! Please sign up early. The training is sold by our partner company cleverbridge. The number of seats is limited. First come, first served. A quote does not mean that a seat will be reserved for you! So please do not be surprised if you receive a notice saying that your quote was cancelled. It probably means that the class is fully booked (or maybe that the class itself was cancelled). A seat is reserved only when payment or a formal purchase order is received! With the purchase order option, payment must be received within 28 days from the date of the invoice. If you sign up someone else, please enter his or her name as the delivery contact. If you sign up a whole group at a time, please tell us the names of the attendees by e-mail. Thank you! 

How it works: Attendees will connect using the GoToMeeting application (free). Questions can usually be asked orally or in the chat window. All verbal and textual interchange is between all attendees and the instructor. You may be asked to share your screen with the instructor if you run into problems. To facilitate a virtual classroom environment more akin to that in a real one, course participants are asked to join the meeting with a webcam and microphone / headset, making them both visibly and audibly present in the course. X-Ways will not record the class. Participants are also asked to refrain from any voice or video recordings, for both copyright and privacy reasons.

Further details about required downloads (X-Ways Forensics software, images, training manuals, ...) will be provided in advance. Please make sure you will be undisturbed for the duration of the training!

Training provided by X-Ways Software Technology AG, Germany, the makers of WinHex and X-Ways Forensics.

Preconditions: You already have a working knowledge of computer forensics in general and know your way around X-Ways Forensics. This course uses X-Ways Forensics to examine the underlying structures of file systems and partitioning schemes, but does not deal with the use of the product as such, except the first module which includes an introduction to navigating offsets and sectors in raw data, employing the Data Interpreter and templates to view dates and numbers from the raw hex data. Attendees without a solid unterstanding of how to use the Data Interpreter and templates, are definitely recommended to attend the first module of this course, as all subsequent modules will simply assume this as given.

Important: You need to use your own computer running Windows 7 or newer. Please have MS Excel or something equivalent installed. You need to be connected to the Internet. Ideally you will use 2 computers or 2 screens, one for the presentation and one to run the application. A headset would be perfect to have so that you can give spontaneous oral feedback and ask questions, and do not transmit ambient noise as an ordinary webcam microphone would. We offer a temporary license for X-Ways Forensics with BYOD or BYOD+ for the duration of the class in case you don't have a dongle at hand.