Example: confidence

DIGITAL NOTES ON COMPUTER FORENSICS - MRCET

DIGITAL NOTES . ON. COMPUTER FORENSICS . IV YEAR - I SEM. (2019-20). DEPARTMENT OF INFORMATION TECHNOLOGY. MALLA REDDY COLLEGE OF ENGINEERING & TECHNOLOGY. (Autonomous Institution UGC, Govt. of India). (Affiliated to JNTUH, Hyderabad, Approved by AICTE - Accredited by NBA & NAAC A' Grade - ISO 9001:2015 Certified). Maisammaguda, Dhulapally (Post Via. Hakimpet), Secunderabad 500100, Telangana State, INDIA. MALLA REDDY COLLEGE OF ENGINEERING & TECHNOLOGY. DEPARTMENT OF INFORMATION TECHNOLOGY. UNIT - I. COMPUTER FORENSICS Fundamentals: What is COMPUTER FORENSICS ?

DIGITAL NOTES ON COMPUTER FORENSICS B.TECH IV YEAR - I SEM (2019-20) DEPARTMENT OF INFORMATION TECHNOLOGY MALLA REDDY COLLEGE OF ENGINEERING & TECHNOLOGY (Autonomous Institution – UGC, Govt. of India) (Affiliated to JNTUH, Hyderabad, Approved by AICTE - Accredited by NBA & NAAC – ‘A’ Grade - ISO …

Tags:

  Computer, Digital

Information

Domain:

Source:

Link to this page:

Please notify us if you found a problem with this document:

Other abuse

Transcription of DIGITAL NOTES ON COMPUTER FORENSICS - MRCET

1 DIGITAL NOTES . ON. COMPUTER FORENSICS . IV YEAR - I SEM. (2019-20). DEPARTMENT OF INFORMATION TECHNOLOGY. MALLA REDDY COLLEGE OF ENGINEERING & TECHNOLOGY. (Autonomous Institution UGC, Govt. of India). (Affiliated to JNTUH, Hyderabad, Approved by AICTE - Accredited by NBA & NAAC A' Grade - ISO 9001:2015 Certified). Maisammaguda, Dhulapally (Post Via. Hakimpet), Secunderabad 500100, Telangana State, INDIA. MALLA REDDY COLLEGE OF ENGINEERING & TECHNOLOGY. DEPARTMENT OF INFORMATION TECHNOLOGY. UNIT - I. COMPUTER FORENSICS Fundamentals: What is COMPUTER FORENSICS ?

2 ,Use of COMPUTER FORENSICS in Law Enforecement, COMPUTER FORENSICS Assistance to Human Recources/Employment Proceedings, COMPUTER FORENSICS Services,Benefits of professional FORENSICS Methodology,Steps taken by COMPUTER FORENSICS Specialists. Types of COMPUTER FORENSICS Technology: - Types of Business COMPUTER Forensic of Military COMPUTER Forensic Technology,Types of Law Enforcement- COMPUTER Forensic Technology,Types of Business COMPUTER Forensic Technology. COMPUTER FORENSICS Evidence and capture: Data Recovery Defined-Data Back-up and Recovery-The Role of Back -up in Data Recovery-The Data -Recovery Solution.

3 UNIT - II. Evidence Collection and Data Seizure: Why Collect Evidence? Collection Options- Obstacles-Types of Evidence-The Rules of Evidence-Volatile Evidence-General Procedure-Collection and Archiving-Methods of Collections-Art facts-Collection Steps -Controlling Contamination: The chain of custody. Duplication and Preservation of DIGITAL Evidence: Preserving the DIGITAL Crime Scene- COMPUTER Evidence processing steps-Legal Aspects of collecting and Preserving COMPUTER forensic Evidence. COMPUTER image Verification and Authentication: Special needs of Evidential Authentication - Practical Consideration-Practical Implementation.

4 UNIT - III. COMPUTER forensic analysis and validation: Determining what data to collect and analyze, validating forensic data, addressing data-hiding techniques, performing remote acquisitions Network FORENSICS : Network forensic overview, performing live acquisitions, developing standar procedures for network FORENSICS , using network tools, examining the honeynet project. Processing crime at incident scenes: Identifying DIGITAL evidence, collecting evidence in private-sector incident scenes, processing law enforcement crime scenes, preparing for a search, securing a COMPUTER incident or crime scene, seizing DIGITAL evidence at the scene, storing DIGITAL evidence, obtaining a DIGITAL hash, reviewing a case.

5 UNIT - IV. Current COMPUTER Forensic Tools: evaluating COMPUTER forensic tool needs, COMPUTER forensic software tools, COMPUTER forensic hardware tools, validating and testing forensic software. E-mail investigations: Exploring the role of email in investigations, exploring the role of client and server in email, investigating email crimes and violations, understanding email servers, using specialized email forensic tools. Cell phone and mobile device FORENSICS : Understanding mobile device forensic, understanding acquisition procedures for cell phones and mobile devices.

6 UNIT - V. Working with windows and dos systems: understanding file systems, exploring Microsoft file structures examining NTFS disks, understanding whole disk encryption, windows registry, Microsoft startup tasks, MS Dos startup tasks, virtual machines. TEXT BOOKS: 1. COMPUTER FORENSICS , COMPUTER Crime Investigation by John R,Vacca, Firewall Media, New Delhi. 2. COMPUTER FORENSICS and Investigations by Nelson, Phillips Enfinger, Steuart, CENGAGE. Learning. REFERENCE BOOKS: 1. Real DIGITAL FORENSICS by Keith , Richard Bejitlich,Curtis ,Addison- Wesley Pearson Education 2.

7 Forensic Compiling,A Tractitioneris Guide by Tony Sammes and Brain Jenkinson,Springer International edition. 3. COMPUTER Evidence Collection &Presentation by Chrostopher Brown,Firewall Media. 4. Homeland Security ,Techniques& Technologies by Jesus Mena,Firewall Media. 5. Software FORENSICS Collecting Evidence from the Scene of a DIGITAL Crime by Robert ,TMH 2005. 6. Windows FORENSICS by chad Steel,Wiley India Edition. MALLA REDDY COLLEGE OF ENGINEERING & TECHNOLOGY. DEPARTMENT OF INFORMATION TECHNOLOGY. INDEX. TOPIC NAME UNIT-1.

8 1 COMPUTER FORENSICS Fundamentals 1. 2 Types Of COMPUTER Forensic Technology 7. 3 COMPUTER FORENSICS Evidence and capture 14. UNIT-2. 4 Evidence Collection and Data Seizure 22. 5 Duplication and Preservation of DIGITAL Evidence 31. 6 COMPUTER image Verification and Authentication 40. UNIT-3. 7 COMPUTER forensic analysis and validation 48. 8 Network FORENSICS 60. 9 Processing crime at incident scenes 65. UNIT-4. 10 Current COMPUTER Forensic Tools 74. 11 E-mail investigations 80. 12 Cell phone and mobile device FORENSICS 89. UNIT-5.

9 13 Working with windows and dos systems 94. 14 Understanding Whole Disk Encryption 105. 15 Virtual Machines 112. MRCET DEPARTMENT OF IT. UNIT-1. INTRODUCTION. WHAT IS COMPUTER FORENSICS ? COMPUTER FORENSICS is the process of methodically examining COMPUTER media (hard disks, diskettes, tapes, etc.) for evidence. In other words, COMPUTER FORENSICS is the collection, preservation, analysis, and presentation of COMPUTER -related evidence. COMPUTER FORENSICS also referred to as COMPUTER forensic analysis, electronic discovery, electronic evidence discovery, DIGITAL discovery, data recovery, data discovery, COMPUTER analysis, and COMPUTER examination.

10 COMPUTER evidence can be useful in criminal cases, civil disputes, and human resources/. employment proceedings. USE OF COMPUTER FORENSICS IN LAW ENFORCEMENT. COMPUTER FORENSICS assists in Law Enforcement. This can include: Recovering deleted files such as documents, graphics, and photos. Searching unallocated space on the hard drive, places where an abundance of data often resides. Tracing artifacts, those tidbits of data left behind by the operating system. Our experts know how to find these artifacts and, more importantly, they know how to evaluate the value of the information they find.


Related search queries