Computer forensics is a new and exiting field that is gaining popularity. Because of the complexity and legal boundaries, few truly understand what skills are required to be an effective computer forensics technician. VTC author s Bobby Rogers and Brad Causey take you step by step through the entire investigative process, explaining all the details that an investigator would have to know. To begin learning today simply click on one of the links.
OverviewComputer Forensics DefinitionCourse Overview Pt.1Course Overview Pt.2Defining Incident ResponseIncident Response DefinitionCriminal InvestigationsCorporate InvestigationsPrivate/Civil InvestigationsRole Of The InvestigatorImpartialitySkill Sets && TrainingEvidence Control && DocumentationInvestigation && AnalysisReporting && TestifyingThe Incident Response Team (IRT)Roles of an Incident Response Team
Charter
Authority, Roles && Responsibility
Team Training && Cross-Functional Skills
Team Preparation && Activation
Computer Crime LawsComputer Crime Laws && Issues
US Constitution Fourth Amendment
Title 18 USC
Other US Statutes
Corporate Regulation && Privacy IssuesComputer Abuse in the Corporate World
Security && Acceptable Use Policies
Expectation of Privacy
Evidence Control && DocumentationDocument! Document! Document!
Evidence Collection && Inventory
Chain of Custody
Evidence Storage && Security
Federal Rules of Evidence
Crime Scene ResponsePreparation: Your Response Kit
Securing the Scene
Photographing the Scene
Marking && Inventorying
Live Response
Post Mortem Examination
Building a Forensics LaboratoryLaboratory Standards
Facility Physical Security
Evidence Security
Software
Hardware
Portable Forensics Lab
Commercial Forensics Software ToolsThe Case for Commercial Tools
EnCase
Access Data Forensics Tool Kit
DriveSpy && Paraben
Open Source Forensics ToolsOpen Source Forensics Tools
Linux dd
Autopsy && The Sleuth Kit
Helix
Forensic Incident Response Environment
Knoppix
Basics of Disk ImagingTypes of Disk Duplication
Bitstream Images
Importance of Slack space/Unallocated space
Hashing
Disk Imaging Toolsdd
Symantec Ghost
FTK Imager
Encase
Hardware Imagers
Disk AnalysisDisk Basics
Disk Structures - Fat File System
Disk Structures - NTFS File System
Disk Structures - EXT2/EXT3 File Systems
File AnalysisWhat are you looking for?
File Attributes
Known File Type Signatures && Hashes
Malware
Steganography
Log File AnalysisInstallation Logs
Windows Event Logs
Firewall && IDS Logs
Application && Error Logs
Windows ForensicsWhat you are looking for?
Live vs. Dead Responses
Network Connections, Processes, && Services Pt.1
Network Connections, Processes, && Services Pt.2
Network Connections, Processes, && Services Pt.3
Hidden Files && NTFS Streams
Encrypted && Password Protected Files
Browser Artifacts
Auditing && The Security Event Log
Windows Forensics Tools
Linux ForensicsLinux Forensics
Case StudyThe Case
Incident Response
Data acquisition
Data analysis
Documentation
Concluding an InvestigationDocumentation
Preparation
Concluding a Corporate Investigation
Testifying in Court
Ethical Responsibilities
That Is A WrapWrapping it up
CreditsAbout The Authors
Click here to find out more about the Introduction To Computer Forensics Training CD