Practical Cyber Forensics Investigation
Get to know the world of computer investigations, with an emphasis on the Windows environment. This short online program features expert instruction, hands-on projects, and a real connection to the industry.
-
Aligned to industry best practice
-
State-of-the-art cyber lab for real-world simulations
-
Delivered in person or online
Practical Cyber Forensics Investigation
Course Details
This interactive, 40-hour course will provide your team with the cyber security skills your organisation needs to counter current and future threats. As well as practical, day-to-day advice to improve your team’s understanding of potential vulnerabilities and help prevent or respond to cyber attacks.
Duration
40 hours
Delivery Mode
In person or online
Course Fee
$2,995
Practical Cyber Forensics Investigation
Course Overview
In this program, you will gain an introduction to Incident Response, learn how to handle common security incidents and perform Digital Forensics deep Investigations during the incidents and deep dive into Insider and Malware Threats from forensics perspectives.
Target Audience
Incident handlers and leaders of incident handling teams
System administrators
Other security personnel who are TIER2 cybersecurity personae.
Learning Objectives
By graduation, your team will be able to perform these responsibilities:
Understand the Incident Response plan and methodologies
Detect, identify and contain the most common cyber security incidents
Look for suspicious activity of malwares and malicious code on endpoints
Analyze malwares with several techniques (static and dynamic)
Find, collect, and perform a forensics investigation of digital evidence
Look for Cyber Threat Intelligence feeds with online and Open Source tools
We've trained over 50,000+ professionals across the world
Hands-On Practice
Real-world simulations in our Virtual Cyber Lab
Prepare your team for real-life cyber attacks simulated with the latest vulnerabilities and learn to defend against developing threats.
Advanced cyber labs for educating the next generation of cyber professionals.
Allows trainers to demonstrate and let students experience real-life scenarios. Participants can experiment with potential responses in real-time.
Dashboards and detailed reports provide a complete analysis of learning and performance, which will help your team members learn from their failures and successes on an individual and team level.
Program Curriculum
Module 1 – Intro to Incident Response
- Threat Actors
- SOC Building Blocks
- Live Demo – Show Me the Money – Use Case
- Hands-On 1-1: Desktop Challenge
- Hands-On 1-2: Incident Response Challenge
- Assignment: Watch and Relax
- Hours + Labs = 2
Module 2 – Intro to Practical Malware Analysis
- Malware and Malware Analysis
- Analysis Techniques
- Types of Malwares
- Malware Behavior
- Live Demo – Persistence Mechanisms
- Creating a Safe Analytical Environment
- Live Demo – Performing Malware Analysis on windows
- Live Demo – Armored Malware
- Quiz
- Assignment: Introduction to Practical Malware Analysis
- Hours + Labs = 2
Module 3 – Build Your Malware Analysis Lab
- Why do you need a Malware Analysis Lab? How to build it?
- Step 1. Your network
- Step 2. Virtualization?
- Step 3. Analysis Machines
- Step 4. Testing your environment
- Step 5. Start your Malware Analysis
- Quiz
- Assignment: Analyze your Malware
- Hours + Labs = 2
Module 4 – Intro to Practical Digital Forensics
- Introduction and Definition
- Crime scene
- The forensic lab and tools
- Quiz
- Assignment 4-1: Files True Type
- Hours + Labs = 4
Module 5 – Know your Forensics Investigation lab and Tools
- The Investigator Lab
- The Lab
- Hardware Prerequisites
- The Investigator Software
- Conclusion
- File Signature Table / Magic Number
- Hands-On: What is your type?
- Assignment: Job Interview
- Hours + Labs = 4
Module 6 – Digital Forensics and Enforcement of Law
- Cyber Crime Workflow
- Digital Forensics and Enforcement of the Law
- The Fourth Amendment
- Chain of Custody
- Anti-computer forensics
- Anti-Forensics Methods
- Anti-Forensics Tools
- Hands-On 1: Steganography
- Hands-On 2: Twitter Secret Messages
- Assignment: Into the Square
- Hours + Labs = 2
Module 7a – Practical Windows Forensics Investigation
- Practical Windows Forensics
- Digital Forensics-Primary Goals
- Forensics Analysis Process
- Forensics Investigation Process
- Forensics Analysis Checklist
- Most important Artifacts of Windows 7
- Hours + Labs = 6
Module 7b – Windows Artifacts
- Windows Registry
- MRU
- Shellbags
- JumpLists
- USB Device
- MCAB Times
- Recycle Bin
- Event Log
- RDP
- Thumbs.db
- Hands-On- USB Investigation
- Assignment: Multiple Device
- Hours + Labs = 5
Module 8 – Memory Forensics
- Prefetch
- Page Files
- Create Memory Dump
- Analysis Dump Files
- Volatility
- Volix
- Memorize
- Hours + Labs = 5
Module 9 – Reporting and Cleanup
- What we need to document
- Write the Forensics Investigation Report
- Store and Cleanup evidence
- Hours + Labs = 4
Module 10 – Final Exercise
- Hands-On Investigation + writing a report
- Hours + Labs = 4
Future-proof your organisation through upskilling & reskilling
Why Choose Us
We have your best interests at the core of our being.
70% Hands-On Practice
70% of the training program is dedicated to actual hands-on practice of the materials and skills taught.
Virtual Cyber Lab
Experience real-life scenarios and experiment with potential responses in real-time.
Global Industry Connections
Leverage our strong global industry connections to pursue a career within or outside of Australia.
Ready to get started?
Find out how CTIA can boost your team's cyber security skills.
Provide your details and we’ll be in touch.
