Računalna forenzika
ECTS: 5 · Semestar: 2 · Ukupna satnica: 50 h
Opis kolegija
Introduction to digital forensics (key components, principles, division of digital forensics) Computer parts (components and architecture) Digital evidence (sources and types). The location of the investigation Procedures with the computer turned off or on. Document all devices Methods of Copying All Evidenced Holders Packing and Saving All Components Documenting All Steps, Numerical System and Computers: RAM, boot process File System basisc, FAT File System NTFS File System, Other File Systems Files and Forensic Characteristic of Files File Recovery and Data Carving, Complex Files Hash, Aquistion and Verification of Evidence Windows Artefacts, Internet Artefacts Encription Email Artefacts, Messaging Artefacts New tehnologies and digital Forensics, Report creation
Ishodi učenja
- izdvojiti dokaze sa mjesta zlocina
- voditi analizu racunala
- identificirati i analizirati kriptirane podatke
- složiti izvjestaje o provedenoj digitalno forenzickoj istrazi racunala
- generirati forenzicku kopiju racunala
- valorizirati alate za spremanje i analizu digitalnih dokaza
- prosuditi procedure za spremanje podataka iz racunala
Literatura
Obavezna literatura
- John Sammons, The Basics of Digital Forensics, 2nd Edition, 2014
Nelson B., Philips A., Steuart C., Guide to computer forensics and investigation, 5th Edition, Cengage Learning 2016.
Philipp A., Cowen D., Davis C., Hacking exposed computer Forensics, 2nd Edition, Mc Graw Hill 2010
Brian Carrier: File System Forensic Analysis, 2005