Cyber Security Training | Computer Forensics Foundation Training in Exeter

Computer Forensics Foundation Training Outline

Module 1: Digital Forensics Profession and Investigations

• Overview of Digital Forensics
• Process of Digital Forensics
• Maintaining Professional Conduct
• Types of Digital Forensics
• Procedures for Private-Sector High-Tech Investigations
• Data Recovery Workstations and Software
• Conducting an Investigation

Module 2: Data Acquisition

• Storage Formats for Digital Evidence
• Determining the Best Acquisition Method
• Contingency Planning for Image Acquisitions
• Using Acquisition Tools
• Acquiring Data with a Linux Boot CD
• Validating Data Acquisitions
• Performing RAID Acquisitions
• Using Remote Network Acquisition Tools
• Using Other Forensics Acquisition Tools
• Create an Image with FTK Imager

Module 3: Processing Crime and Incident Scenes

• Identifying Digital Evidence
• Collecting Evidence in Private-Sector Incident Scenes
• Processing Law Enforcement Crime Scenes
• Preparing for a Search
• Securing a Digital Incident or Crime Scene
• Seizing Digital Evidence at the Scene
• Storing Digital Evidence
• Obtaining a Digital Hash
• Acquiring Evidence with OSForensics

Module 4: Working with Windows and CLI Systems

• File Systems
• Microsoft File Structures
• Examining NTFS Disks
• Whole Disk Encryption
• Windows Registry
• Microsoft Startup Tasks
• Virtual Machines
• Virtual Machines Using Oracle VirtualBox

Module 5: Digital Forensics Tools

• Evaluating Digital Forensics Tool Needs
• Digital Forensics Software and Hardware Tools
• Validating and Testing Forensics Software

Module 6: Linux and Macintosh File Systems

• Examining Linux File Structures
• Macintosh File Structures
• Using Linux Forensics Tools

Module 7: Recovering Graphics Files

• Recognising a Graphics File
• Data Compression
• Identifying Unknown File Formats
• Copyright Issues with Graphics
• Use Autopsy for Search and Extract Recover Evidence

Module 8: Digital Forensics Analysis and Validation 

• Determining What Data to Collect and Analyse
• Validating Forensic Data
• Addressing Data-Hiding Techniques

Module 9: Virtual Machine Forensics, Live Acquisitions, Network Forensics, E-Mail, and Social Media Investigations 

• Virtual Machine Forensics
• Performing Live Acquisitions
• Network Forensics Overview
• Role of E-Mail in Investigations
• Roles of the Client and Server in E-Mail
• E-Mail Servers
• Using Specialised E-Mail Forensics Tools
• Applying Digital Forensics Methods to Social Media Communications
• Network Analysis Using Wireshark

Module 10: Mobile Device Forensics and the Internet of Anything 

• Mobile Device Forensics
• Acquisition Procedures for Mobile Devices
• Forensics in the Internet of Anything

Module 11: Report Writing for High-Tech Investigations

• Importance of Reports
• Guidelines for Writing Reports
• Generating Report Findings with Forensics Software Tools