Digital Forensics

There are no pre-requisites for this course

• Fundamentals of computer forensics and digital evidence
• Objectives of forensic readiness to reduce the cost of investigation
• Roles and responsibilities of a forensic investigator.
• Legal compliance in computer forensics
• Forensic investigation process and its importance
• Forensic investigation phases
• Types of disk drives and their characteristics
• Booting process of Windows, Linux, and Mac operating systems
• Examine file system records during an investigation
• Data acquisition fundamentals, methodologies, and their different types
• Determine the data acquisition format
• anti-forensics techniques and their countermeasures
• How to gather volatile and non-volatile information
• Perform Windows memory and registry analysis
• Analyze the cache, cookie, and history recorded in the web browsers
• Examine Windows files and metadata
• Volatile and non-volatile data in Linux
• Analyze filesystem images using the sleuth kit
• Demonstrate memory forensics
• Mac forensics concepts
• Network forensics fundamentals
• Event correlation concepts and types
• Identify indicators of compromise (IoCs) from network logs
• Investigate network traffic for suspicious activities
• Web application forensics and web attacks
• Understand IIS and Apache web server logs
• Detect and investigate various attacks on web applications
• Dark web forensics investigation and how it works.
• Tor browser forensics
• Email basics and how it can be used as evidence
• Techniques and steps used in email crime investigation
• Malware, its components, and distribution methods
• Malware forensics fundamentals and types of malware analysis
• Perform static malware analysis and dynamic malware analysis
• Conduct system and network behaviour analysis