Course Outline
Computer forensics facilitates the meticulous and systematic identification of evidence in cases involving computer-related crimes and misuse. Applications span a wide spectrum, from tracking the digital footprints of hackers across client systems, to identifying the source of defamatory emails, and to uncovering indicators of fraudulent activities.
Module 1: Introduction
Module 2: Computer Forensic Incidents
Module 3: Investigation Process
Module 4: Disk Storage Concepts
Module 5: Digital Acquisition & Analysis
Module 6: Forensic Examination Protocols
Module 7: Digital Evidence Protocols
Module 8: CFI Theory
Module 9: Digital Evidence Presentation
Module 10: Computer Forensic Laboratory Protocols
Module 11: Computer Forensic Processing Techniques
Module 12: Digital Forensics Reporting
Module 13: Specialized Artifact Recovery
Module 14: e-Discovery and ESI
Module 15: Mobile Device Forensics
Module 16: USB Forensics
Module 17: Incident Handling
Mile2 - Lab 1: Preparing Forensic Workstation
- Installation of AccessData FTK Imager
- Installation of Autopsy
- National Software Reference Library (NSRL) configuration for Autopsy
- Installation of 7z
- Installation of Registry Viewer
- Installation of Password Recovery Tool Kit (PRTK – 5.21)
Lab 2: Chain of Custody
- Search and Seizure under Chain of Custody protocols
- Forensic Imaging with Chain of Custody compliance
Lab 3: Imaging Case Evidence via FTK Imager
Lab 4: Creating a new case in Autopsy
- Case creation procedures within Autopsy
Lab 5: Reviewing Evidence via Autopsy (Case #1)
- Investigation of User MTBG attempting to hack a previous employer
- Evidence review processes in Autopsy
Case Study scenario:
- Identification of required evidence (Challenge)
Final Report for the MTBG case
Lab 6: Reviewing Evidence via Autopsy (Case #2)
- The Greg Schardt case investigation
Case Study Scenario:
- Identification of required evidence (Challenge)
Testimonials (2)
Clarity and pace of explanations
Federica Galeazzi - Aethra Telecomunications SRL
Course - AI-Powered Cybersecurity: Advanced Threat Detection & Response
It did give me the insight what I needed :) I am starting teaching on a BTEC Level 3 qualification and wanted to widen my knowledge in this area.