This advanced course, utilizes the dedicated specialised teaching facility and resources at Northumbria University, and provides extensive hands-on experience in respect of using the software products currently available to the analyst. Students will receive an introduction to forensic tools, measures used to decide how and where it is appropriate to utilize these methods during examinations and the latest techniques being used when dealing with large quantities of data. Current Linux freeware tools available to use during intrusion forensics and collection of live data. Content includes:
- Comprehensive look at the assorted forensic tools available, including Guidance Software EnCase and AccessData FTK.
- Effective techniques which may need to be considered to conduct examinations.
- A broad understanding of Microsoft Windows Operating Systems from a forensic analysis perspective looking at such areas as deleted files, recycle bin, metadata, link files and temporary internet files and email.
- Relevant hands on case studies reinforcing previous learning.
A thorough understanding of cybercrime and practical insight into the techniques and tools that are used to undertake such criminal activities.