D431 - Digital Forensics in Cybersecurity

---

About

Digital Forensics in Cyber Security examines the relationships between incident categories, evidence handling, and incident management. This course teaches students to identify consequences associated with cyber threats and security laws using a variety of tools to recognize and recover from unauthorized, malicious activities and how to seek evidence that reveals who, what, when, where, and how threats compromise information.

Objective

Objective

• Identifies Forensics Rules, Policies, and Laws
  • The learner identifies laws, rules, standards, policies, and best practices related to digital forensics.
• Conducts Forensic Analysis
  • The learner conducts analysis on gathered evidence with forensic tools in alignment with investigation processes.
• Collects Forensic Evidence
  • The learner collects forensic evidence from deleted files and artifacts.
• Identifies Steganography Techniques
  • The learner identifies steganography techniques for data transmission.

Course Outline

• Fundamentals of Forensics and Computer Crime
  • Introduction to Forensics
  • Overview of Computer Crime
• Forensic Method and Managing Evidence
  • Forensic Methods and Labs
  • Collecting, Seizing, and Protecting Evidence
  • Forensic Frameworks
• Digital Forensic Procedures
  • Understanding Techniques for Hiding and Scrambling Information
  • Recovering Data
  • Windows Forensics
  • Linux Forensics
  • Mac OS Forensics
  • Email Forensics
  • Mobile Forensics
  • Network Forensics
• Incident and Intrusion Response
  • Digital Forensics and Incident Response (DFIR)
• Digital Forensics in Cybersecurity Labs
• Final Assessment
  • D431 Task 1 - Investigative Plan of Action
  • D431 Task 2 - Forensic Investigation

Pacing

• Week 1
  • Chapter 1
  • Chapter 2
  • Chapter 3
  • Chapter 4
• Week 2
  • Chapter 5
  • Chapter 6
  • Chapter 8
• Week 3
  • Chapter 9
  • Chapter 10
• Week 4
  • Chapter 11
  • Chapter 12
  • Chapter 13
• Week 5
  • Chapter 7
  • Chapter 15
• Week 6
  • Practice exam
  • Final exam
  • Performance assessment
    • task 1
    • task 2

Resources

Textbook

• Easttom, C. (2021). Digital Forensics, Investigation, and Response (4th Edition). Jones & Bartlett Learning.

Other

• Ryoo, J. (2023). Cybersecurity Foundations: Computer Forensics [Video]. LinkedIn Learning (2:42:00).
• Ryoo, J. (2024). Operating System Forensics. LinkedIn Learning (1:41:00)
• Dion. J. (2019). Learning Cyber Incident Response and Digital Forensics. LinkedIn Learning (1:52:00)