Computer forensics, or digital forensics, is a fairly new field. Computer forensics investigators, also known as computer forensics specialists, computer forensics examiners, or computer forensics analysts, are charged with uncovering and describing the information contained on, or the state or existence of, a digital artifact. Digital artifacts include computer systems, hard drives, CDs, and other storage devices, as well as electronic documents and files like emails and JPEG images. The fast-growing field of computer forensics includes several branches related to firewalls, networks, databases, and mobile devices. Digital forensics technicians can find work with many types of organizations: government (local, state, and federal), accounting firms, law firms, banks, and software development companies. Essentially, any kind of organization that has a computer system may have a need for a digital forensics specialist. Some digital forensics specialists opt to start their own businesses, giving them an opportunity to work with a variety of clients. Computer forensics investigators provide many services based on gathering digital information, from investigating computer systems and data in order to present information for legal cases to determining how an unauthorized user hacked into a system. A digital forensics examiner does many things in the course of these tasks – protects the computer system, recovers files (including those that were deleted or encrypted), analyses data found on various disks, and provides reports, feedback, and even testimony when required. The employment outlook for digital forensics examiners and investigators is favorable due to the rapid growth of crimes involving computers (cybercrime). Learning Outcomes After the successful completion of this course, the learner will be able to: A. Understand the importance of a systematic procedure for investigation of data found on digital storage media that might provide evidence of wrong-doing. B. Understand the file system storage mechanisms of the operating systems. C. Use tools for faithful preservation of data on disks for analysis. D. Find data that may be clear or hidden on a computer disk. E. Learn the use of computer forensics tools used in data analysis, such as searching, absolute disk sector viewing and editing, recovery of files, password cracking, etc. F. Understand how to present the results of disk data analysis in a court proceeding as an expert witness.
Overview
Syllabus
WEEK
TOPIC
MODULE
Week 1
Introduction to Digital Forensic
Definition of Computer Forensics
Cyber Crime
Evolution of Computer Forensics
Objectives of Computer Forensics
Roles of Forensics Investigator
Forensics Readiness
Steps for Forensics
Week 2
Computer Forensics Investigation Process
Digital Forensics Investigation Process
Digital Forensics Investigation Process-Assessment Phase
Acquire the Data
Analyze the Data
Report the Investigation
Week 3
Digital Evidence and First Responder Procedure
Digital Evidence
Digital Evidence Investigation Process
First Responders Toolkit
Issues Facing Computer Forensics
Types of Investigation
Techniques in digital forensics
Week 4
Understanding Storage Media and File System
The Booting Process
LINUX Boot Process
Mac OS Boot Sequence
Windows 10 Booting Sequence
File System
Type of File Systems
Week 5
Windows Forensics
Introduction to Windows Forensics
Windows Forensics Volatile Information
Windows Forensics Non- Volatile Information
Recovering deleted files and partitions
Windows Forensics Summary
Digital Forensics Road map: Static Data Acquisition from windows using FTK Imager
Live Data Acquisition using FTK Imager
FTK Imager
Installation of KALI Linux
RAM Dump Analysis using Volatility
Static Data Acquisition from Linux OS
Week 6
Recovering Deleted Files and Partitions
Digital Forensics Tools
Overview of EnCase Forensics
Deep Information Gathering Tool: Dmitry Page
Computer Forensics Live Practical by using Autopsy and FTK Imager
Week 7
Network Forensics
Introduction to Network Forensics
Network Components and their forensic importance
OSI internet Layers and their Forensic importance
Tools Introduction Wireshark and TCPDUMP
Packet Sniffing and Analysis using Ettercap and Wireshark
Network Forensics
Wireshark Packet Analyzer
Packet Capture using TCP DUMP
Website Penetration: WHOIS, nslookup
Week 8
Logs & Event Analysis
Forensic Analysis using AUTOPSY: Linux and Windows
Forensics and Log analysis
Compare and AUDIT Evidences using Hashdeep Page
Data Carving using Bulk Extractor: Kali Linux and Windows
Recovering Evidence from Forensic Images using Foremost
Week 9
Application Password Cracking
Introduction to Password Cracking
Password Cracking using John the Ripper
Password Cracking using Rainbow Tables
PDF File Analysis
Remote Imaging using E3 Digital Forensics
Week 10
Wireless and Web Attacks
WiFi Packet Capture and Password Cracking using Aircrack ng
Introduction to Web Attacks
Website Copier: HTTRACK
SQL Injection
Site Report Generation: Netcraft
Vulnerability Analysis: Nikto
Wayback Machine
Deep Information Gathering Tool: Dmitry
Image Metadata Extraction using Imago
Week 11
Email Forensics Investigation
Email Forensics Investigations
Week 12
Mobile Device Forensics
Mobile Forensics
Preparation for Digital Forensic investigation
Investigative reports, expert witness and cyber regulations
Introduction to Report Writing
Forensic Reports & Expert Witness
Demonstration of Some Forensics Tools
Demonstration of Some Forensics Tools
Taught by
Dr. Jeetendra Pande
Related Courses
Related articles
Reviews
4.9 rating, based on 51 Class Central reviews
-
The lectures were good. Informative sessions. Advanced tools and techniques may be added up towards the end which might help out aspires to deal with mobile forensics and network forensics
-
Good Course with Deep Knowledge of Digital Forensics and the practical sessions is very clear and detail understanding about all forensics tools and their use.
I think Who want to became Ethical Hacker will also join this Course for more understanding and hands-on practice -
Like all others , onr more great course provided by NTA. Timely lectures and quite interesting and knowledgeable. One get's to learn things almost the same way as he/she is attending the classes physically. Waiting for more such online courses especially on ballistics.
-
this course is excellent with the organization, study material video quality etc. easy language to better understand the course. Teachers are very knowledgeable and experts in his/her field.
-
Kaushik ChakrabortyHi Respected Dear Sir Madam My self Kaushik Chakraborty Student Of Digital Forensics
Uttarakhand Open University, Haldwani via Swayam
Respected Teacher & Mentor Is Very Good So Easley I learned A lots of about The Forensics Science Related it's Very Great Opportunity For Us Need More New Videos classes & chapter overall its Great -
This course is very informative and wonderful session. As a forensic student,I m very impressed by the syllabus and study material which is provided by the site .
-
The classes were very good.. I have learnt actual to use forensic tool from you sir. The classes have really changed my mindset towards usage of internet.
-
Very helpful and good course ..
Course खुप छान आहे. या मधून खुप गोष्टी शिकण्यासाठी मिळतात. या अभ्यास क्रमाचा प्रत्येक नागरिकाला खुप उपयोग होईल. -
Excellent course to get knowledge about the world of digital crime and how to investigate them as a forensic experts. So, go for it.
-
Course conduction is very well organized planned and well-executed by the organizers. We expect many courses from IGOU NPTEL to conduct in the same manner. I was looking for VANET courses, if could provide it would be a great help.
Regards and Thanks
Pradeep -
I'm excited to learn more about the skills of a Digital Forensics engineer and possible career opportunities. I believe a career in Digital Forensics could be right for me...
-
Teaching methodology is very much learner friendly specially HandsOn exercises provides practical exposure. enjoyed a lot this course and way of lecture delivery
-
I've enrolled in this course to learn more about the Digital Forensics course. I'm excited to learn more about the skills of a Digital Forensics engineer and possible career opportunities. I believe a career in Digital Forensics could be right for m…
-
The course conduction was very well organized planned and well-executed by the organizers. We expect many courses from IGONU NPTEL to conduct in the same way
I was looking for such type of courses, and i got a chance to do this informative course.
Regards and Thanks
Twinkle Rajput. -
This video classess were effective to know about digital forensics .
It was very and clear descriptive session and quiz and assignments were really too good.
Thanks for the fantastic session in NPTEL
-
The entire course was excellent all respected professors taught very nicely. The content of E- notes is also helpful and framed nicely. Also all the quizzes are also very helpful for practicing.
-
This Digital forensic course is Very comprehensive course and useful for student as well as working professionals.
Course content is covering almost all aspect of forensics using Ict tools -
Great course....it provide all the basic knowledge one who want to step in the world of digital forensics. Great faculties and best topics with study materials are provided.
-
Very useful information. Digital forensic in recent worldwide famous cyber. By your video and certificate course it will be helpful for further academic purpose.
-
Teaching Learning methodology is very much knowledgeable specially HandsOn exercises provides practical exposure. enjoyed a lot this course and way of lecture delivery.
