Fundamentals of Forensics - ESP-A-007
- Track: Technical, Management.
- Level: Awareness level - Provides a basic understanding of IT security responsibilities relative to a particular role
- Overview
This course highlights the fundamentals of the computer forensics process. It gives an insight as to how the computer forensic process is approach, the methodologies involved and an understanding of the nature of the evidence. This training is provided in the context of using software such as Encase from Guidance Software. In this way organisations can better prepare themselves for incidents and be able to respond to them without contaminating the evidence.
- Outline
You will learn
- How to identify a potential incident.
- Recover & present the evidence from the network in a forensic manner.
- Have a plan and resource in place to react quickly and effectively.
- Fully aware of the legal, privacy and ethical issues involved.
- Be fully prepared in the event of a disciplinary or legal dispute.
- Course duration
- 1 day - The course begins daily at 9.30 and ends at 17.00 on each day. This can be tailored to meet client’s specific requirements.
- Course cost
€650. This includes courseware, refreshments and lunch on the day.
- Course dates
- Friday 6 March 2009
Ireland - Dublin 
.- Course location
On-Site / Espion Training Center
- Content
Lesson One: Introduction & Overview
Lesson Two: Incident Response Procedure
- Analysis and identification of the cause of the incident;
- Planning and implementation or remedies to prevent recurrence, if necessary;
- Collection of audit trails and similar evidence;
- Communication with those affected by or involved with recovery from the incident;
- Reporting the action to the appropriate authority.
Lesson Three: Computer Forensics & Encase
- How to investigate a possible fraud, misuse
- Securing all the evidence
- Accuracy & authentication
- Linking – evidence to users
- No compromise of original material
- Preparing a case report
Lesson Four: Case Study
Lesson Five: Legal Issues
- Corporate Responsibility & Governance
- Employee Rights
- Admissible Evidence
- Procedure
Lesson Six: Prevention