Course Outline
Computer forensics facilitates the rigorous and methodical identification of evidence within computer-related criminal and abuse scenarios. Applications extend from tracking a hacker’s trail through a client’s infrastructure to identifying the source of defamatory communications, or recovering indicators of fraudulent activity.
Module 1: Introduction
Module 2: Computer Forensic Incidents
Module 3: Investigation Process
Module 4: Disk Storage Concepts
Module 5: Digital Acquisition & Analysis
Module 6: Forensic Examination Protocols
Module 7: Digital Evidence Protocols
Module 8: CFI Theory
Module 9: Digital Evidence Presentation
Module 10: Computer Forensic Laboratory Protocols
Module 11: Computer Forensic Processing Techniques
Module 12: Digital Forensics Reporting
Module 13: Specialized Artifact Recovery
Module 14: e-Discovery and ESI
Module 15: Mobile Device Forensics
Module 16: USB Forensics
Module 17: Incident Handling
Mile2 - Lab 1: Preparing Forensic Workstation
- Installation of AccessData FTK Imager
- Installation of Autopsy
- National Software Reference Library (NSRL) setup for Autopsy
- Installation of 7z
- Installation of Registry Viewer
- Installation of Password Recovery Tool Kit (PRTK – 5.21)
Lab 2: Chain of Custody
- Search and seizure procedures for Chain of Custody
- Chain of Custody forensic imaging
Lab 3: Imaging Case Evidence with FTK Imager
Lab 4: Initiating a New Case in Autopsy
- Case creation workflow in Autopsy
Lab 5: Evidence Review in Autopsy (Case #1)
- Scenario: User MTBG attempting to compromise a former employer
- Detailed evidence examination within Autopsy
Case Study Scenario:
- Identification of required evidence (Challenge)
Final Report for the MTBG Case
Lab 6: Evidence Review in Autopsy (Case #2)
- Analysis of the Greg Schardt case
Case Study Scenario:
- Identification of required evidence (Challenge)
Testimonials (2)
Clarity and pace of explanations
Federica Galeazzi - Aethra Telecomunications SRL
Course - AI-Powered Cybersecurity: Advanced Threat Detection & Response
It did give me the insight what I needed :) I am starting teaching on a BTEC Level 3 qualification and wanted to widen my knowledge in this area.