DIGITAL FORENSICS

Teacher

Sangram Routray

Category

Core Courses

Course Attendees

Still no participant

Course Reviews

Still no reviews

Course Name : DIGITAL FORENSICS

Code(Credit) :CUTM1619(4-0-2)

Course Objectives

  • To explain the role of digital forensics and the relationship of digital forensics to traditional forensic science, traditional science and the appropriate use of scientific methods

Course Outcomes

SNO DESCRIPTION PO MAPPING
CO1 Identify and explain at least current issues in the practice of digital forensic investigations. PO1, PO2, PO3, PO6, PO8, PO10
CO2 Understand the Role of Digital Evidence& its collection-Digital Evidence PO1,  PO4, PO5, PO6,P11,P12
CO3 Understanding Digital Forensic Investigation PO1,PO2, PO4, PO6, PO7,P10

Course Syllabus

MODULE (I):                                                                                                                       

 

Digital Forensics overview–Difference between computer Forensics and Digital Forensics, Digital Forensics in today’s world, Computer Forensics investigation process, Forensics readiness planning and its benefits.

 

MODULE (II):                                                                                                                     

 

Understanding Digital Forensic Investigation–Digital Forensics Life Cycle- Understanding key steps in Forensics investigation, Role of forensic investigator – Ethics of a forensic investigator–challenges faced by forensic investigators.

 

MODULE (III):                                                                                                                    

 

Role of Digital Evidence& its collection-Digital Evidence–Authentication of Evidence-Importance of digital evidences in investigation and in court of law–Capabilities of a digital forensic investigator. Evidence Collection -Collections Options – Obstacles - Types of Evidence - Standards of Evidence - The rules of Evidence - Volatile Evidence– Electronic Evidence General Procedure - Collection and Archiving of evidence -Methods of Collection – Artifacts - Controlling Contamination - Chain of custody.

 

MODULE (IV):                                                                                                                    

 

Computer Forensics Investigation Process -Cyber Forensics investigation methodology, steps to prepare for a computer forensics investigation, procedure to collect evidence in crime scene, search warrants, evaluate and secure the crime scene.

Text Book:

  • CISSP All-in-One Exam Guide by Shon Harris and Fernando Maymi, 7 Edition, McGraw-Hill Education, 1 June 2016.
  • Information Security Management handbook, 6thEdition, Harold F Tipton, Micki Krause, Auerbach Publications, 5 April 2012.
  • The CISSP Prep Guide: Gold Edition by Ronald L. Krutz, Russel Dean Vines, Gold Edition, Wiley Publication, 31 Oct 2002.

 

Reference Book:

  • Certified Information Systems Security Professional, Study Guide by Ed Tittle, Mike Chapple, James Michael Stewart, 6th Edition, Sybex Publication, 06 July 2012

Session Plan

Session 1

Digital Forensics overview:

DF-1

Session 2

computer Forensics,Digital Forensics:

DF-2

Session 3

Digital Forensics in today’s world:

DF-3

Session 4

Computer Forensics investigation process:

DF-4

Session 5

Forensics readiness planning:

DF-5

Session 6

Forensics readiness planning and its benefits:

DF-5

Session 7

Understanding Digital Forensic Investigation:

DF-M2-1

Session 8

Digital Forensics Life Cycle:

DF-M2-2

Session 9

Understanding key steps in Forensics investigation:

DF-M2-3

Session 10

Role of forensic investigator:

DF-M2-4

Session 11

Ethics of a forensic investigator:

https://www.ijnrd.org/papers/IJNRD2203091.pdf

Session 12

challenges faced by forensic investigators:

challenges faced by forensic investigators

Session 13

Role of Digital Evidence:

DF-M3-1

Session 14

Digital Evidence:

Digital Evidence

Session 15

Authentication of Evidence:

Authentication of evidence

Session 16

Importance of digital evidences in investigation and in court of law:

Importance of digital evidences in investigation and in court of law

Session 17

Session 18

Evidence Collection -Collections Options:

Evidence Collection

Session 19

Obstacles - Types of Evidence:

DF-M2-6

Session 20

Standards of Evidence - The rules of Evidence:

Standards of Evidence

 

 

 

Session 21

Volatile Evidence– Electronic Evidence General Procedure:

Volatile Evidence

Session 22

Collection and Archiving of evidence:

evidence-collection

Session 23

Methods of Collection – Artifacts:

Methods of Collection

Session 24

Controlling Contamination - Chain of custody:

Controlling Contamination

Session 25

Computer Forensics Investigation Process:

DF-M4-1

Session 26

Cyber Forensics investigation methodology:

DF-M4-2

Session 27

Steps to prepare for a computer forensics investigation:

DF-M4-3

Session 28

procedure to collect evidence in crime scene:

DF-M4-4

Session 29

crime scene, search warrants:

Crime scene search warents

Session 30

Evaluate and secure the crime scene:

evaluation of scene of crime

experiment-1

Digital forensic process and methodologies

https://youtu.be/cWKo_dMUw7M

experiment-2

Digital concepts and magnetic media

https://youtu.be/zsvLuj3K1gs

experiment-3

Evidence preservation

https://youtu.be/9sURC18Bx9M

experiment-4

Forensic software packages

 

https://youtu.be/TLKZEU1DZ9c

experiment-5

Windows files system-FATS,NTFS

 

https://youtu.be/HbgzrKJvDRw

experiment-6

Linux file systems: Ext,JFS, XFS,& Swap

https://youtu.be/C4jNfXZ90fw

experiment-7

Timeline & file metadata behaviors

https://youtu.be/VYROU-ZwZX8

experiment-8

Window forensic techniques-1

https://youtu.be/6RyXRde6K00

experiment-9

experiment-10

Internet/Email analysis

https://youtu.be/QQ9ZLlj36qs

Our Main Teachers

Sangram Routray

Assistant Professor
VIEW PROFILE