Fundamentals of Computer Forensics

Course Director: Mattia Epifani
Hours: 8
Prerequisites: Basic knowledge of major file systems and operating systems
 

Syllabus: 

  • Digital forensics and digital evidence: definitions and basic technical concepts
     
  • ISO standards on Digital Forensics (27037, 27042, 27043)
     
  • The Digital Forensics process model
     
  • Roles in DFIR (First Responder, Forensic Investigator, Forensic Analyst)
     
  • Order of volatility
     
  • Data sources
     
  • Chain of custody
     
  • Techniques and tools for forensic acquisition
     
  • Digital Forensics and Incident Management
     
  • NIST 800-86 recommendations: integrating digital forensics into incident response
     
  • Enterprise Forensics elements

Key Learning Outcomes:
Understand the fundamental aspects of Digital Forensics and Incident Response

Last update