Computer Forensics

This module introduces the core concepts of digital forensics and incident response. Students learn about the four-step digital forensics procedure, fundamental concepts of computer forensics, network forensics, Internet forensics, and anti-forensics techniques. The module establishes the foundation for conducting forensic investigations.

This module covers essential Unix/Linux concepts for forensic investigation. Students learn about various incident response tools specific to Unix/Linux systems and understand the structure and analysis of Ext2/Ext3 file systems. The module focuses on the technical foundations needed for Unix/Linux forensic work.

This module delves into specific steps and technologies used in Unix/Linux forensic investigations. Students learn practical investigation techniques through case studies and hands-on practice with forensic tools. The module emphasizes real-world application of forensic principles in Unix/Linux environments.

This module focuses on Windows-specific incident response procedures and memory forensics. Students learn about various tools used in Windows incident response and techniques for analyzing system memory. The module provides practical skills for responding to incidents in Windows environments.

This module explores the fundamentals of Windows systems and file systems from a forensic perspective. Students learn about Windows-specific forensic tools and techniques for analyzing Windows file systems. The module provides essential knowledge for conducting Windows-based forensic investigations.

This module covers advanced Windows forensic investigation techniques, including system acquisition and detailed analysis of the Windows registry and other artifacts. Students learn practical approaches to collecting and analyzing evidence from Windows systems.

This module focuses on advanced forensic topics including loadable kernel module rootkits and steganography. Students learn about detection and analysis of hidden information and advanced malware. The module covers sophisticated techniques for uncovering concealed evidence.