Informatica forense

• Introduction to digital forensics (key components, principles, division of digital forensics)
• Computer parts (components and architecture)
• Digital evidence (sources and types)
• The location of the investigation
• Procedures with the computer turned off or on
• Document all devices
• Methods of
• Copying
• All
• Evidenced
• Holders
• Packing and
• Saving
• All
• Components
• Documenting
• All
• Steps
• Numerical
• System and
• Computers: RAM, boot process
• File
• System basisc, FAT File
• System NTFS File
• System
• Other
• File
• Systems
• Files and
• Forensic
• Characteristic of
• Files
• File
• Recovery and
• Data
• Carving
• Complex
• Files
• Hash
• Aquistion and
• Verification of
• Evidence
• Windows
• Artefacts
• Internet
• Artefacts
• Encription
• Email
• Artefacts
• Messaging
• Artefacts
• New tehnologies and digital
• Forensics
• Report creation

Bibliografia obbligatoria

• John Sammons, The Basics of Digital Forensics, 2nd Edition, 2014
  Nelson B., Philips A., Steuart C., Guide to computer forensics and investigation, 5th Edition, Cengage Learning 2016.
  Philipp A., Cowen D., Davis C., Hacking exposed computer Forensics, 2nd Edition, Mc Graw Hill 2010
  Brian Carrier: File System Forensic Analysis, 2005