Computer forensics

• Introduction to digital forensics (key components, principles, division of digital forensics)
• Computer parts (components and architecture)
• Digital evidence (sources and types)
• The location of the investigation
• Procedures with the computer turned off or on
• Document all devices
• Methods of
• Copying
• All
• Evidenced
• Holders
• Packing and
• Saving
• All
• Components
• Documenting
• All
• Steps
• Numerical
• System and
• Computers: RAM, boot process
• File
• System basisc, FAT File
• System NTFS File
• System
• Other
• File
• Systems
• Files and
• Forensic
• Characteristic of
• Files
• File
• Recovery and
• Data
• Carving
• Complex
• Files
• Hash
• Aquistion and
• Verification of
• Evidence
• Windows
• Artefacts
• Internet
• Artefacts
• Encription
• Email
• Artefacts
• Messaging
• Artefacts
• New tehnologies and digital
• Forensics
• Report creation

1. Collect Evidence from a Crime Site
2. Carry out Computer Analysis
3. Identify and analyze encrypted data
4. Create reports on the Digital Forensic Computer Investigation
5. Creating Forensic Copies of Computers
6. Use Tools to Save and Analyze Digital Evidence
7. Knowing Procedures for storing data from a computer

Required reading

• John Sammons, The Basics of Digital Forensics, 2nd Edition, 2014
  Nelson B., Philips A., Steuart C., Guide to computer forensics and investigation, 5th Edition, Cengage Learning 2016.
  Philipp A., Cowen D., Davis C., Hacking exposed computer Forensics, 2nd Edition, Mc Graw Hill 2010
  Brian Carrier: File System Forensic Analysis, 2005