Computer Hacking Forensic Investigator CHFI v.10

• Understanding Computer Forensics
• Why and When Do You Use Computer Forensics?
• Cyber Crime (Types of Computer Crimes)
• Case Study
• Challenges Cyber Crimes Present For Investigators
• Cyber Crime Investigation
• Rules of Forensics Investigation
• Understanding Digital Evidence
• Types of Digital Evidence
• Characteristics of Digital Evidence
• Role of Digital Evidence
• Sources of Potential Evidence
• Rules of Evidence
• Forensics Readiness
• Computer Forensics as part of an Incident Response Plan
• Need for Forensic Investigator
• Roles and Responsibilities of Forensics Investigator
• What makes a Good Computer Forensics Investigator?
• Investigative Challenges
• Legal and Privacy Issues
• Code of Ethics
• Accessing Computer Forensics Resources

• Importance of Computer Forensics Process
• Phases Involved in the Computer Forensics Investigation Process
• Pre-investigation Phase
• Investigation Phase
• Post-investigation Phase

• Hard Disk Drive Overview
• Disk Partitions and Boot Process
• Understanding File Systems
• RAID Storage System
• File System Analysis

• Data Acquisition and Duplication Concepts
• Static Acquisition
• Validate Data Acquisitions
• Acquisition Best Practices

• What is Anti-Forensics?
• Anti-Forensics techniques
  •Data/File Deletion
  •Password Protection
  •Steganography
  •Data Hiding in File System Structures
  •Trail Obfuscation
  •Artifact Wiping
  •Overwriting Data/Metadata
  •Encryption
  •Encrypted Network Protocols
  •Program Packers
  •Rootkits
  •Minimize Footprint
  •Exploiting Forensic Tools Bugs
  •Detecting Forensic Tool Activities
  •Anti-Forensics Countermeasures
  •Anti-Forensics Challenges
  •Anti-forensics Tools

Introduction to OS Forensics

Windows Forensics

• Collecting Volatile Information
• Collecting Non-Volatile Information
• Analyze the Windows thumbcaches
• Windows Memory Analysis
• Windows Registry Analysis
• Cache, Cookie, and History Analysis
• Windows File Analysis
• Metadata Investigation
• Text Based Logs
• Other Audit Events
• Forensic Analysis of Event Logs
• Windows Forensics Tools

Linux Forensics

• Shell Commands
• Linux Log files
• Collecting Volatile Data
• Collecting Non-Volatile Data

MAC Forensics

• Introduction to MAC Forensics
• MAC Forensics Data
• MAC Log Files
• MAC Directories
• MAC Forensics Tools

• Introduction to Network Forensics
• Fundamental Logging Concepts
• Event Correlation Concepts
• Network Forensic Readiness
• Network Forensics Steps
• Network Traffic Investigation
• Documenting the Evidence
• Evidence Reconstruction

• Introduction to Web Application Forensics
• Web Attack Investigation
• Investigating Web Server Logs
• Web Attack Detection Tools
• Tools for Locating IP Address
• WHOIS Lookup Tools
• WHOIS Lookup Tools

• Database Forensics and Its Importance
• MSSQL Forensics
• MySQL Forensics

• Introduction to Cloud Computing
• Cloud Forensics
• Usage of Cloud Forensics
  • Cloud Crimes
  • Cloud Forensics: Stakeholders and their Roles
  • Cloud Forensics Challenges
  • Investigating Cloud Storage Services
  • Investigating Dropbox Cloud Storage Service
  • Investigating Google Drive Cloud Storage Service
  • Cloud Forensics Tools: UFED Cloud Analyzer

• Introduction to Malware Forensics
• Why Analyze Malware
• Identifying and Extracting Malware
• Prominence of Setting up a Controlled Malware Analysis Lab
• Preparing Testbed for Malware Analysis
• Supporting Tools for Malware Analysis
• General Rules for Malware Analysis
• Documentation Before Analysis
• Types of Malware Analysis
  • Malware Analysis: Static
  • Malware Analysis: Dynamic
  • Analysis of Malicious Documents
  • Malware Analysis Challenges

• Email System
• Email Crimes (Email Spamming, Mail Bombing/Mail Storm, Phishing, Email Spoofing, Crime via Chat Room, Identity Fraud/Chain Letter)
• Email Message
• Steps to Investigate Email Crimes and Violation
• Email Forensics Tools
• Laws and Acts against Email Crimes

• Mobile Device Forensics
• Why Mobile Forensics?
• Top Threats Targeting Mobile Devices
• Mobile Hardware and Forensics
• Mobile OS and Forensics
• What Should You Do Before the Investigation?
• Mobile Forensics Process

• Writing Investigation Reports
• Expert Witness Testimony