Training Calendar

Mon Tue Wed Thu Fri Sat Sun
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

psmb

Total Visitors

38.2%United States United States
21.2%China China
19.1%Canada Canada
8.5%Russian Federation Russian Federation
6.3%Malaysia Malaysia
2.1%United Kingdom United Kingdom
2.1%France France
2.1%Germany Germany

Yesterday: 1
This Week: 1
Last Week: 6
This Month: 12
Last Month: 9
Total: 50085

Introduction to Digital Forensic First Responder (DF)

IT Courses
Date: 04 September 2018 09:00 - 06 September 2018 17:00

 

Course Overview

This course will provide a foundation in the field of Computer Forensics. The student will learn how to obtain and analyse digital information for possible use as evidence in civil, criminal or administrative cases. Topics include applications of hardware and software to computer forensics, computer forensics law, volume and file system analysis, computer forensics investigations, and computer forensics in the laboratory. Hands-on exercises guide discussions and reinforce the subject matter.

This course is designed as an introductory course in computer forensics. Students will first understand the need for computer forensics. Students will learn best practices for general incidence response. The course will then focus on the tools and techniques to perform a full computer forensic investigation.

 

 

 data recovery

Who Should Attend?

The course has been designed for IT personnel, administrators, computer support staffs and an end-user who are aware the importance of data in their storage. No previous repair or data recovery experience necessary. This training is intended to be introduced to the latest data recovery techniques and solutions.

 

Data Recovery – Schedule

Day 1

09.00am – 10.00am

Introduction to Computer Forensics

  • Course overview
  • Understanding the need for computer forensics
  • Defining computer forensics
10.00am – 10.30am

Breakfast

10.30am – 12.45pm

Computer Hardware

  • Understanding the computer components
  • Digital Media
  • Hard disk basics

Computer Forensic Incidents

  • Introduction
  • The Legal System
  • Criminal Incidents
  • Civil Incidents
  • Computer Fraud
  • Internal Threats
  • External Threats
  • Investigative Challenges

12.45pm – 02.15pm

Lunch

02.15pm – 05.00pm

Digital Incident Response

  • Digital Incident Assessment
  • Initial Assessment · Type of Incident · Parties Involved
  • Incident / Equipment Location
  • Available Response Resources
  • Securing Digital Evidence
  • Chain of Custody
  • Potential Digital Evidence

OS / Disk Storage Concepts

  • OS / Disk Storage Concepts
  • Disk Based Operating Systems
  • OS / File Storage Concepts
  • Disk Storage Concepts 1
  • Demo ­ Creating a file and writing it to FAT/NTFS
  • Disk Storage Concepts 2
  • Slack Space
  • File Management · File Formats

Day 2

09.00am – 10.00am

Digital Acquisition & Analysis Tools

  • Digital Acquisition & Analysis Tools
  • Digital Acquisition
  • Terms Defined
  • Demo ­ Generic Hash Demo / Crypto Demo
  • Demo ­ Hashing a File
  • Digital Acquisition Procedures 1
  • Demo ­Winhex Software
  • FTK Explorer / OsForensic
  • Demo ­ Osforensic Acquisition
  • Digital Acquisition Procedures 2
  • Digital Forensic Analysis Tools
  • Demo ­ Autopsy

10.00am – 10.30am

Breakfast

10.30am – 12.45pm

The Forensic Toolkit

  • Forensic hardware
  • Hardware write/blockers
  • Hard drive acquisitions
  • Processing the scene
  • Lab 1: Hard drive acquisition

E-mail Analysis

  • Viewing e-mail
  • Webmail
  • POP
  • IMAP

12.45pm – 02.15pm

Lunch

02.15pm – 05.00pm

File Signature Analysis

  • File signatures
  • File extensions
  • Differences between
  • Identifying differences
  • Reading: Instructor Handouts

Forensic Examination Protocols

  • Forensic Examination Protocols
  • Demo ­ Create Disk Images
  • Demo ­ Data Recovery Exercise
  • “The 20 Basic Steps”
  • Demo ­ File Carving Exercise

                                                                        Day 3

09.00am – 10.00am

Other Windows Artifacts

  • Common windows artifacts
  • Recycle bin
  • My Documents
  • Recent files
  • Installed programs
  • Lab 8: Basic Computer Forensics Lab

10.00am – 10.30am

Breakfast

10.30am – 12.45pm

Image Restoration

  • Live Acquisition
  • Recovery and Searching
  • Password Cracking and Encryption

Data Carving

  • Data recovery: identifying hidden data, Encryption/Decryption,
  • Steganography,
  • Recovering deleted files.
  • Digital evidence controls: uncovering attacks that evade detection by Event Viewer, Task Manager.
  • Windows GUI tools, data acquisition, disk imaging, recovering swap files, temporary &cache files

12.45pm – 02.15pm

Lunch

02.15pm – 05.00pm

Anti-Forensics

  • Traditional methods
    • Overwriting Data and Metadata
    • Cryptography, Steganography, and other Data Hiding Approaches
    • Decrypting EFS
  • Non-traditional methods
    • Targeting forensic tool blind spots
    • Targeting forensic tool vulnerabilities
    • Targeting generic tool/lib vulnerabilities

Digital Evidence Presentation

  • Processing a complete forensic case
  • Preparing a forensic report
  • Digital Evidence Presentation
  • The Best Evidence Rule conclusion

 

Telephone
+60-012-385 8401 +60-018-365 1369
Email
This email address is being protected from spambots. You need JavaScript enabled to view it.
Address
Lot 17, Selayang 18, Persiaran 3, Selayang, 68100 Batu Caves, Selangor

 

Map


 

All Dates


  • From 04 September 2018 09:00 to 06 September 2018 17:00

Powered by iCagenda