Cyber Forensics

Cyber Forensics: Cyber Technology- Technological Aspects of Cyber Forensics-Governance Aspects of Cyber Forensics- Judicial Aspects of Cyber Forensics- Legal Perspective of Cyber Forensic investigations. Computer Forensic Investigations: -Preparing for computer investigations, understanding Public and private investigations. Forensics Investigation Principles - Forensic Protocol for Evidence Acquisition - Digital Forensics Standards and Guidelines - Digital Evidence – Data Acquisition - storage formats for digital evidence, determining the best acquisition method, contingency planning for image acquisitions.

Cyber Forensics Tools-Computer Forensics software and hardware tools -Open Source and Proprietary -Challenges in Cyber Forensics, Skills Required to Become a Cyber Forensic Expert, Physical Requirements of a Cyber forensics Lab,Types of Cyber forensics. File System Forensics-Working with windows and DOS systems- file systems, exploring Microsoft file structures, examining FAT and NTFS disks, whole disk encryption, the windows registry, Microsoft and MS-DOS startup tasks, Examining UNIX and LINUX disk structures and boot processes, examining CD data structures, examining IDE/EIDE and SATA devices.

Windows Forensics-Live Response: Data Collection- Introduction , Locard’s Exchange Principle, Order of Volatility - Volatile and Non Volatile Data Live-Response Methodologies: Data Analysis, Windows Memory Analysis, Rootkits and Rootkit detection. Linux Forensics: Live Response Data Collection- Data Analysis- Log Analysis, Keyword Searches, User Activity, Network Connections, Running Processes, Open File Handlers, The Hacking Top Ten, Reconnaissance Tools. Network Forensics: The OSI Model, Forensic Footprints, Seizure of Networking Devices, Network Forensic Artifacts, ICMP Attacks, Drive-By Downloads, Network Forensic Analysis Tools, Case Study: Wireshark. Web Attack Forensics: OWASP Top 10, Web Attack Tests, Penetration Testing.

Cyber Security: Cybercrimes, Types of Cybercrimes –Cyber Security Steps taken to protect ICT and prevent Misuse of Internet- IT Act 2000- Social Cyber Media.

Anti-forensic Practices - Data Wiping and Shredding- Data Remanence, Degaussing, Case Study: USB Oblivion, Eraser - Trail Obfuscation: Spoofing, Data Modification, Case Study: Timestamp – Encryption, Case Study: VeraCrypt, Data Hiding: Steganography and Cryptography, Case Study: SilentEye, Anti-forensics Detection Techniques, Case Study: Stegdetect.