Teacher

Sangram Routray

Category

Course Attendees

Still no participant

Course Reviews

Still no reviews

Course Code-CUTM1625

Course Name-Cyber Forensics

Course Objectives-

The aim of this course is to equip you with the knowledge and techniques to computer forensics practices and evidence analysis. It prepares you to use various forensic investigation approaches and tools necessary to start a computer forensics investigation. It also aims at increasing the knowledge and understanding in cyber security and ethical hacking.

Course Outcome-

  • Define computer forensics.
  • Identify the process in taking digital evidence.
  • Describe how to conduct an investigation using methods of memory, operating system, network and email forensics.
  • Assess the different forensics tools.
  • Differentiate among different types of security attacks.
  • Describe the concept of ethical hacking.

SYLLABUS

MODULE 1-

Digital Forensics–Understanding OS file system-Boot Process-Hard Drive architecture. Introduction to Incident response, digital forensics four-step procedure, Concepts: computer/network/Internet forensic and anti-forensics. Memory forensics.

 

MODULE 2-

OS Forensics–Basic Windows / Linux Forensics including log analyzer-Register Viewer-Process Viewer-Browser logs review - Packet capturing - Password identification. UNIX/Linux incident response tools, UNIX/Linux file systems (Ext2/Ext3), Unix/Linux forensics investigation steps and technologies, Unix/Linux forensics case studies., Windows incident response tools, Windows file systems, Windows forensics tools, Windows acquisition, Windows forensics analysis – registry and other artifacts.

 

MODULE 3-

Forensic Imaging Process–Acquiring the Digital Evidence–Understanding Data Acquisition, Data Acquisition methods and Process. Disk and File System Analysis – Media Analysis Concepts – The Sleuth Kit – Portioning Disk Layouts–Special Containers – Hashing – Carving – Forensic Imaging.

 

MODULE 4-

Digital Forensics with Open-Source Tools–Digital Forensics–Open-Source tools–Benefits of Open-Source Tools–Open-Source Examination Platform–Preparing the Examination System–Using Linux as the host - Using Windows as the host, Loadable kernel module rootkits, Steganography hiding, detection and analysis.

PRACTICAL-

  1. Image Analysis and Stegnography
  2. Image types.
  3. Evidence hiding.
  4. Live System Acquisition and Partial Acquisitions.
  5. Live system concerns.
  6. Large server concerns.
  7. Imaging speed and bandwidth.
  8. RAM acquisitions and concerns.
  9. Network Forensics Introductions.
  10. Network forensic concerns.
  11. Preservation of network traffic.
  12. Network traffic packet analysis tools and techniques.
  13. Forensic suites: Encase, FTK, PRTK, Registry Viewer, Black Bag Apple.

Reference Books-

  • Digital Forensics with Open-Source Tools by Cory Altheide, Harlan Carvey, Paperback–Import Edition, Syngress, 24 May 2011.
  • Understanding Forensic Digital Imaging by Herbert L. Blitzer, Karen Stein-Ferguson, Jeffrey Huang, 1stEdition, Academic Press, 26 July 2010.
  • The basics of Digital Forensics by John Sammons, 2nd Edition, Elsevier Publication, 2012.
  • Windows Forensics Analysis Tool kit by Harlan Carvey, 3rd Edition, Syngress Publication, 2007.

REFERENCE BOOK:

 

  • Cyber Forensics: A field manual for collecting, Examining, preserving evidence of computer crimes by Albert Marcella, Jr., Doug Menendez, Second Edition, CRC Press 2007.
  • Encase Computer Forensics–The Official EnCE: Encase Certified Examiner Study Guide by Steve Bunting, 3rd Edition, John Wiley & Sons Publication, 2012.
  • Man, Young Rhee, “Internet Security: Cryptographic Principles”, “Algorithms and Protocols”, Wiley Publications, 2003.
  • Nelson, Phillips, Enfinger, Steuart, “Computer Forensics and Investigations”, Cengage Learning, India Edition, 2008.

Session Plan Theory

Session I

Session I

Session I

Session I

Session I

Session I

Session I

Session I

Session I

Session I

Session I

Session I

Session Plan

Our Main Teachers

Sangram Routray

Assistant Professor
VIEW PROFILE