DF120 - Foundations in Digital Forensics with EnCase is a 4-day training course that teaches digital forensic investigation techniques using OpenText EnCase software. The course provides hands-on instruction through practical exercises and real-life simulations covering incident response, employee misconduct investigations, and law enforcement criminal or civil investigations. The training covers the complete digital forensics workflow including case creation, evidence acquisition and validation, data analysis, and reporting. Participants learn to configure the EnCase interface, use case templates, create evidence files, and install external file viewers. The course teaches analysis techniques such as keyword and indexed searching, hash analysis, file signature analysis, and entropy analysis. Students learn evidence handling procedures including tagging and bookmarking files, extracting data, conducting raw and index searches, importing and exporting data, and creating reports using EnCase templates. The course concludes with instruction on archiving, validating data, and restoring cases. The training is designed for digital forensic investigators from law enforcement, government, military, corporate, IT security, and litigation support sectors. It requires only basic computer skills and awards 32 CPE credits upon completion.