EC-Council Digital Forensics Essentials (DFE)
- Course Duration
- 2 Days
Need Group Training
Course Description
This course will introduce learners to Computer Forensics Fundamentals as well as the Computer Forensics Investigation Process. Plan to learn about Dark Web, Windows, Linux, Malware Forensics, and so much more! The interactive labs component of this course ensures that learners receive the hands-on, practical experience required for a future in digital forensics. Put your newly acquired abilities to the test with an exhilarating Capture the Flag (CTF) Exercise seamlessly integrated in our Capstone project. This CTF is seamlessly integrated by live virtual machines, genuine software, and real networks, all delivered within a secure and regulated sandbox environment. With these exclusive hands-on, human-versusmachine CTF challenges you will develop the hands-on proficiencies essential for success in your cyber professional role.
Course Objective
- Key issues plaguing the computer forensics
- Different types of digital evidence
- Computer forensic investigation process and its phases
- Different types of disk drives and file systems
- Data acquisition methods and data acquisition methodology
- Anti-forensics techniques and countermeasures
- Volatile and non-volatile information gathering from Windows, Linux, and Mac Systems
- Network forensics fundamentals, event correlation, and network traffic investigation
- Web server logs and web applications forensics
- Dark web forensics
- Email crime investigation
- Malware forensics fundamentals and different types of malware analysis
Course Outline
Module 01: Computer Forensics Fundamentals
- Fundamentals of Computer Forensics
- Digital Evidence
- Forensic Readiness
- Roles and Responsibilities of a Forensic Investigator
- Legal Compliance in Computer Forensics
Module 02: Computer Forensics Investigation Process
- Forensic Investigation Process and its Importance
- Forensic Investigation Process – Pre-Investigation Phase
- Forensic Investigation Process – Investigation Phase
- Forensic Investigation Process – Post investigation Phase
Module 03: Understanding Hard Disks and File Systems
- Different Types of Disk Drives and their Characteristics
- Logical Structure of a Disk
- Booting Process of Windows, Linux, and Mac Operating Systems
- File Systems of Windows, Linux, and Mac Operating Systems
- File System Examination
Module 04: Data Acquisition and Duplication
- Data Acquisition Fundamentals
- Types of Data Acquisition
- Data Acquisition Format
- Data Acquisition Methodology
Module 05: Defeating Anti-forensics Techniques
- Anti-Forensics and its Techniques
- Anti-Forensics Countermeasures
Module 06: Windows Forensics
- Volatile and Non-Volatile Information
- Windows Memory and Registry Analysis
- Cache, Cookie, and History Recorded in Web Browsers
- Windows Files and Metadata
Module 07: Linux and Mac Forensics
- Volatile and Non-Volatile Data in Linux
- Analyze Filesystem Images Using The Sleuth Kit
- Memory Forensics
- Mac Forensics
Module 08: Network Forensics
- Network Forensics Fundamentals
- Event Correlation Concepts and Types
- Identify Indicators of Compromise (IoCs) from Network Logs
- Investigate Network Traffic
Module 09: Investigating Web Attacks
- Web Application Forensics
- IIS and Apache Web Server Logs
- Investigating Web Attacks on Windows-based Servers
- Detect and Investigate Attacks on Web Applications
Module 10: Dark Web Forensics
- Dark Web
- Dark Web Forensics
- Tor Browser Forensics
Module 11: Investigating Email Crimes
- Email Basics
- Email Crime Investigation and its Steps
Module 12: Malware Forensics
- Malware, its Components and Distribution Methods
- Malware Forensics Fundamentals and Recognize Types of Malware Analysis
- Static Malware Analysis
- Analyze Suspicious Word Documents
- Dynamic Malware Analysis
- System Behavior Analysis
- Network Behavior Analysis