Академический Документы
Профессиональный Документы
Культура Документы
An important note
This short course is a mini version of ITC597-Digital
Forensics. A subject offered at Charles Sturt University.
Most material used in this short course will be from
ITC597 textbook:
Nelson, B., Phillips, A., & Steuart, C. (2015). Guide to
Computer Forensics and Investigations (5/e). Cengage
Learning, Boston, MA
Week 1
Week 1 Objectives
The investigative process
Role of digital forensics investigator
Corporate Vs. criminal investigation
Content search using ProDiscover Basic
Understanding Computer
Forensics
Computer forensics
Definition
Forensic:
Network forensics
Data recovery
Disaster recovery
14
Public investigations
Private or corporate investigations
Public investigations
Understanding Corporate
Investigations
Private or corporate investigations
E-mail harassment
Falsification of data
Gender and age discrimination
Embezzlement
Sabotage
Industrial espionage
19
Understanding Corporate
Investigations (continued)
Establishing company policies
Well-defined policies
Give computer investigators and forensic examiners the
authority to conduct an investigation
Understanding Corporate
Investigations (continued)
Displaying Warning Banners (continued)
Warning banner
Usually appears when a computer starts or connects to the
21
Understanding Corporate
Investigations (continued)
Designating an authorized requester
investigations
Policy should be defined by executive management
Groups that should have direct authority to request
computer investigations
Understanding Corporate
Investigations (continued)
Conducting security investigations
Types of situations
Abuse or misuse of corporate assets
E-mail abuse
Internet abuse
23
Understanding Corporate
Investigations (continued)
Distinguishing personal and company property
24
Maintaining Professional
Conduct (continued)
Enhance your professional conduct by continuing
your training
Record your fact-finding methods in a journal
Attend workshops, conferences, and vendor
courses
Membership in professional organizations adds to
your credentials
Achieve a high public and private standing and
maintain honesty and integrity
26
28
This Week
Digital forensics and investigation
ProDiscover Basic
Next Week
Data acquisition and validation
ProDiscover Basic
WinHex
30