Course Objectives
Digital Forensics and Cyber Investigations - Virtual Learning
Course Objectives
By the end of the course, participants will be able to:
Apply a Digital Forensics methodology in an operational environment
Set a strategy for a Digital Forensics response framework
Conduct investigations into social media, malware, viruses, and ransomware
Manage a Digital Scene-of-Crime and its Digital evidence and artifacts
Investigate mobile technologies, and other media which may hold evidential materials and artifacts
Apply the techniques to extract images from systems artifacts
Target Audience
This course is designed for IT professionals, Fraud Investigators, Auditors, CSIRT and SOC Analysts, working in companies that are targets for cyber and digital attacks. It is also highly beneficial for police and military personnel, probation officers and other security personnel who deal with cyber investigations.
Target Competencies
Performing incident response
Understanding digital forensics
Conducting digital crime investigation
Applying forensic science
Course Outline
Digital forensics – background and legal practicesIntroduction to the science of forensicsTerms and definitionsChain of digital crimeThe background of digital crimeCase histories of real-life casesDigital forensics - lawDigital forensics - legislationStandards of digital forensicsFundamentals of digital forensicsThe risks faced by organizations
The digital forensics response frameworkThe first responder digital forensics toolkitScene of digital crime managementThe Secure Operations Centre (SOC)The CSIRT (Computer Security Incident Response Team)Roles and responsibilitiesImplementing a framework Case management
Collecting and processing digital evidenceDomain Name System (DNS)Extended security infrastructuresInvestigating mobile technologiesAcquisition of digital evidence and artifactsHandling of digital evidence and artifactsProcessing of digital evidence and artifactsCase management protocolsWireless protocolsSupporting technologiesReporting practices
Investigations of internal and external digital crimesOSINT (Open Source Intelligence)Its place in the digital forensic investigationDefining internal crimes Defining external crimesChild exploitation and investigationsMalicious applicationsRansomwareAnti-forensics capabilitiesDigital forensics and terrorism