CYBER FORENSICS

Course Attendees

Still no participant

Course Reviews

Still no reviews

COURSE NAME: CYBER FORENSICS

CODE(CREDIT): CUTM1625(4-0-2)

COURSE OBJECTIVE:

The aim of this course is to equip you with the knowledge and techniques to computer forensics practices and evidence analysis. It prepares you to use various forensic investigation approaches and tools necessary to start a computer forensics investigation. It also aims at increasing the knowledge and understanding in cyber security and ethical hacking.

COURSE OUTCOMES:

SNO	DESCRIPTION	PO MAPPING
CO1	Describe how to conduct an investigation using methods of memory, operating system, network and email forensics.	PO1, PO2, PO5, PO6, PO11, PO12
CO2	Identify the process in taking digital evidence	PO1, PO2, PO4, PO5, PO11
CO3	Understand to the different forensics tools	PO1,PO2, PO5, PO6, PO7

COURSE SYLLABUS:

MODULE (I):

Digital Forensics–Understanding OS file system-Boot Process-Hard Drive architecture. Introduction to Incident response, digital forensics four-step procedure, Concepts: computer/network/Internet forensic and anti-forensics. Memory forensics.

MODULE (II):

OS Forensics–Basic Windows / Linux Forensics including log analyzer-Register Viewer-Process Viewer-Browser logs review - Packet capturing - Password identification. UNIX/Linux incident response tools, UNIX/Linux file systems (Ext2/Ext3), Unix/Linux forensics investigation steps and technologies, Unix/Linux forensics case studies., Windows incident response tools, Windows file systems, Windows forensics tools, Windows acquisition, Windows forensics analysis – registry and other artifacts.

MODULE (III):

Forensic Imaging Process–Acquiring the Digital Evidence–Understanding Data Acquisition, Data Acquisition methods and Process. Disk and File System Analysis – Media Analysis Concepts – The Sleuth Kit – Portioning Disk Layouts–Special Containers – Hashing – Carving – Forensic Imaging.

MODULE (IV):

Digital Forensics with Open-Source Tools–Digital Forensics–Open-Source tools–Benefits of Open-Source Tools–Open-Source Examination Platform–Preparing the Examination System–Using Linux as the host - Using Windows as the host, Loadable kernel module rootkits, Steganography hiding, detection and analysis.

TEXT BOOK:

Digital Forensics with Open-Source Tools by Cory Altheide, Harlan Carvey, Paperback–Import Edition, Syngress, 24 May 2011.
Understanding Forensic Digital Imaging by Herbert L. Blitzer, Karen Stein-Ferguson, Jeffrey Huang, 1^stEdition, Academic Press, 26 July 2010.
The basics of Digital Forensics by John Sammons, 2nd Edition, Elsevier Publication, 2012.
Windows Forensics Analysis Tool kit by Harlan Carvey, 3rd Edition, Syngress Publication, 2007.

REFERENCE BOOK:

Cyber Forensics: A field manual for collecting, Examining, preserving evidence of computer crimes by Albert Marcella, Jr., Doug Menendez, Second Edition, CRC Press 2007.
Encase Computer Forensics–The Official EnCE: Encase Certified Examiner Study Guide by Steve Bunting, 3rd Edition, John Wiley & Sons Publication, 2012.
Man, Young Rhee, “Internet Security: Cryptographic Principles”, “Algorithms and Protocols”, Wiley Publications, 2003.
Nelson, Phillips, Enfinger, Steuart, “Computer Forensics and Investigations”, Cengage Learning, India Edition, 2008.