| |
| Certified Digital Forensics Examiner Training |
| |
| QUICK FACTS – CDFE (Certified Professional Ethical Hacker Training)
|
Description
|
This course will benefit government security agencies as well as organizations intent on pursuing any corrective action, litigation, or proof of guilt based on digital evidence. |
Requirements |
Basic networking knowledge and
background. |
Training Cost |
Rs. 60,000 |
Duration |
48 hrs. |
Certification Exam |
Certified Digital Forensics Examiner (CDFE) |
Certification Cost |
Included in the training fee. |
Career Options |
|
|
| |
| Course Overview: |
| |
Computer Forensics was developed by U.S. federal law enforcement agents during the mid to late 1980s to meet the challenges of white-collar crimes being commi tted wi th the assistance of a PC. By 1985 enforcement agents were being trained in the automated environment and by 1989 software and protocols were beginning to emerge in the discipline.
The Certified Digital Forensics Examiner program is designed to train Cyber Crime and Fraud Investigators whereby students are taught electronic discovery and advanced investigation techniques. This course is essential to anyone encountering digital evidence while conducting an investigation.
|
| |
| BENEFITS OF THIS COURSE |
| |
| This course will benefit government security agencies as well as organizations intent on pursuing any corrective action, litigation, or proof of guilt based on digital evidence. |
| |
| Course Material |
| |
| |
MODULE 1: Legal Aspects and the Need for Digital Forensics |
| |
MODULE 2: Computer Hardware |
| |
MODULE 3: File Systems, Disks and Storage Media |
| |
MODULE 4: First Response Model |
| |
MODULE 5: Boot Process: Windows, Linux and Macintosh |
| |
MODULE 6: PDA Forensics |
| |
MODULE 7: Acquiring Digital Evidence |
| |
MODULE 8: Forensic Models and Protocols |
| |
MODULE 9: Forensics Software and Hardware |
| |
MODULE 10: Cryptography, Password Cracking and Steganography |
| |
MODULE 11: Lab Protocols |
| |
MODULE 12: Forensic Investigative Theory |
| |
MODULE 13: Processing Evidence |
| |
MODULE 14: Documenting and Reporting Digital Evidence |
| |
MODULE 15: Presentation of Digital Evidence |
| |
MODULE 16: Fraud and IT Implications |
| |
MODULE 17: Evidence of Fraud – How do you find it? |
|
| MODULE 1: Legal Aspects and the Need for Digital Forensics |
- Computer Forensics Overview
- Origins of Computer Forensic science
- Criminal and civil Laws
- Council of Europe
- Types of computer fraud incidents
- Internal and external threats
- Investigative challenges
- Lab Exercise
|
| MODULE 2: Computer Hardware |
- Computer Hardware Components
- The Boot Process
- Hard Disk Partitioning
- File System Overview
- Exam Tips
- Lab Exercise
|
| MODULE 3: File Systems, Disks and Storage Media |
- File System Basics - What about the Linux and MAC File System?
- FAT (File Allocation Table) Basics
- The Function of FAT
- Instructor Demonstration Viewing FAT
- NTFS (New Technology File System)
- Linux Files Systems
- Mac File Systems
- Virtual File System
- CD and DVD File Systems
- Media Devices:
- Lab Exercise
|
| MODULE 4: First Response Model |
- What is Computer Evidence?
- Search & Seizure
- Planning and Preparation
- Handling Evidence at the scene
- Chain Of Custody
- Evidence Admissibility in a Court
- Lab Exercise
|
| MODULE 5: Boot Process: Windows, Linux and Macintosh |
- The Boot Process
- When to Pull the Plug or Shutdown?
- Lab exercise
|
| MODULE 6: PDA Forensics |
- TBA
- Investigative options available to crack passwordprotected files
- Lab Exercise
|
| MODULE 7: Acquiring Digital Evidence |
- Using Live Forensics Boot CD's
- Boot Disks
- Forensics Image Files
- Network Evidence acquisition
- FastBloc acquisition
- LinEn acquisition
- Lab Exercise
|
| MODULE 8: Forensic Models and Protocols |
- Four Cardinal Rules
- Alpha 5
- Best Practices
|
| MODULE 9: Forensics Software and Hardware |
- Software Licensing Types
- Free Software
- Industry Accepted Software
- Forensics Hardware Devices
- Lab Exercise
|
| MODULE 10: Cryptography, Password Cracking and Steganography |
- Origins of cryptology and cryptography
- Cryptography and cryptanalysis
- Investigative options available to crack passwordprotected files
- Lab Exercise
- Introduction: Past and Future
- Classification of Steganography
- Steganography Categories
- Types of Steganography
- Applying Steganography
- Steganography Tools
- Detecting Steganography
- Lab Exercise
|
| MODULE 11: Lab Protocols |
- Quality Assurance
- Standard Operating Procedures
- Peer Review
- Administrator Review
- Annual Review
- Deviations from the SOP
- Lab Intake and what you must receive
- Tracking Digital Evidence in the Lab
- Storage Requirements
- Proficiency Tests
|
| MODULE 12: Forensic Investigative Theory |
- Locard's Exchange Principal
- Aspects of Reconstruction
- Classification
- Behavioural Evidence Analysis
|
| MODULE 13: Processing Evidence |
- MAC times and image metadata
- Windows Registry
- System identifiers
- Sources of unique identification within OS
- Aspects of OS data files, to include Index.dat and AOL system files
- “Recycle” folder and deleted files
|
| MODULE 14: Documenting and Reporting Digital Evidence |
| Reviews and analyses the methods used to document and report the results of a computer forensic examination. Students will present their finding and electronic discoveries in an exercise to demonstrate their abilities to create an effective presentation. |
| MODULE 15: Presentation of Digital Evidence |
- “Best evidence” concept
- “Hearsay” concept
- “Authenticity” and “Alteration of Computer
- Records” concepts
- “Layman's analogies” available to the Computer
- Forensic practitioner
- Admissibility of digital evidence in a court of law
|
| MODULE 16: Fraud and IT Implications |
| |
| MODULE 17: Evidence of Fraud – How do you find it?
|
| |
Call us now on
9310851102
9310851103
9310851104
9310851113
011-43380000
011-43380001 |
|
|
| |
| |
|
| |