Core Standards of the Course
Standard 1
Analyze forensic images.
Standard 2
Apply procedural concepts required to use forensic tools.
Standard 3
Apply basic malware analysis using NIST accepted forensic techniques and tools.
Standard 4
Identify anti-forensics techniques.
Standard 5
Determine the important content of event logs in forensics.
Standard 1
Apply procedural concepts necessary to detect a hidden message inside a picture.
Standard 2
Analyze a conversation between two endpoints from a PCAP file.
Standard 3
Recognize that devices are kept in the same state as they were found.
Standard 4
Determine how to gather evidence in a forensically sound manner.
Standard 5
Apply procedural concepts required to discover evidence on different file systems.
Standard 6
Apply procedural concepts required to gather evidence on different operating systems.
Standard 7
Identify proper steps in network capture.
Standard 8
Given a scenario, determine evidence of email crimes.
Standard 1
Determine and report logon/logoff times for a specific user.
Standard 2
Verify the authenticity of evidence (e.g., hash value).
Standard 3
Summarize the proper handling of evidence.
Standard 4
Outline the process for creating a forensically sound image.
Standard 5
Apply evidence collection to the chain of custody.
Standard 6
Discriminate between a live acquisition and static acquisition.
Strand 4
Documentation and Reporting.
Standard 1
Apply forensic investigation methodology.
Standard 2
Identify the steps necessary to validate an emergency contact list for incident response.
Standard 3
Analyze a scene to determine what should be visually documented.
Standard 4
Report findings from a malware analysis.
Standard 5
Identify the elements of a complete forensics report.
Standard 6
Communicate the results of an investigation to an internal team.
Strand 5
Cyber Forensics Fundamentals.
Standard 1
Identify different types of cybercrimes.
Standard 2
Communicate incident handling and the response process.
Standard 3
Distinguish between steganography and cryptography.