Scribd
Upload
46 views

Lecture 0

This document provides details about the INT250 Digital Evidence Analysis course. It lists two reference books and the prerequisite course INT242 Cyber Security Essentials. The assessment model includes attendance, two best Computer Assisted tests out of three, a midterm exam, and an end term exam. It outlines two MOOCs that can be used to fulfill Computer Assisted tests and lists an industry certification that maps to the full course. The course outcomes cover incident response processes, security breach detection and response methodology, live data collection, network and host evidence collection, data analysis techniques, and investigating Windows systems and routers. It lists the six course units which cover these topics.

Uploaded by

ZeyRoX Gaming
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
46 views

Lecture 0

This document provides details about the INT250 Digital Evidence Analysis course. It lists two reference books and the prerequisite course INT242 Cyber Security Essentials. The assessment model includes attendance, two best Computer Assisted tests out of three, a midterm exam, and an end term exam. It outlines two MOOCs that can be used to fulfill Computer Assisted tests and lists an industry certification that maps to the full course. The course outcomes cover incident response processes, security breach detection and response methodology, live data collection, network and host evidence collection, data analysis techniques, and investigating Windows systems and routers. It lists the six course units which cover these topics.

Uploaded by

ZeyRoX Gaming
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
You are on page 1/ 14

INT250

Digital Evidence Analysis


Lecture #0
Course details
• Reference Book
 DIGITAL FORENSICS AND INCIDENT
RESPONSE by GERARD JOHANSEN,
PACKT PUBLISHING, 1st Edition,
(2017).

 INCIDENT RESPONSE & COMPUTER


FORENSICS by JASON LUTTGENS,
MATTHEW PEPE AND KEVIN MANDIA,
MCGRAW HILL EDUCATION, 1st
Edition, (2014).

 Prerequisite - Cyber Security


Essentials (INT242).
Course details
• Reference Book
 DIGITAL FORENSICS AND INCIDENT
RESPONSE by GERARD JOHANSEN,
PACKT PUBLISHING, 1st Edition, (2017).

 INCIDENT RESPONSE & COMPUTER


FORENSICS by JASON LUTTGENS,
MATTHEW PEPE AND KEVIN MANDIA,
MCGRAW HILL EDUCATION, 1st Edition,
(2014).

 Prerequisite - Cyber Security Essentials


(INT242).
Course Assessment Model

L:2 T:0 P:2 Credits:3


MARKS BREAK UP

• Attendance 5
• CA (Two best out of Three CA) 25
CA consists of three test
• Mid Term Exam (MTE) 20
• End Term Exam (ETE) 50

• Total 100
MOOCs Details
MOOC1: COMPUTER HACKING AND FORENSICS
[Benefit: One CA Mapped]

MOOC2: INCIDENT RESPONSE SPECIALIZATION


[Benefit: One CA Mapped]

INDUSTRY CERTIFICATION: COMPUTER


HACKING FORENSIC INVESTIGATOR [Full
Course Mapped]
COURSE OUTCOMES
• CO1::describe the fundamentals of incident response handling
process.
• CO2::discuss the methodology of detecting an incident and responding
to it in case of a security breach.
• CO3::examine the process of live data collection and forensic
duplication during forensic investigations.
• CO4::outline the network and host-based evidence collection during
the evidence handling process.
• CO5::classify various data analysis techniques for network and system
evidence data.
• CO6::evaluate the process of extracting critical data from windows
systems and routers
UNIT I : Introduction to Incident Response
UNIT II : Preparing for Incident Response
UNIT III : Live Data Collection
UNIT IV : Collecting Network Based
Evidence
UNIT V : Data Analysis Techniques
UNIT VI : Investigating Windows Systems
Network and Router Forensic
Fundamentals
Any Questions……?

You might also like