Digital Evidence & Forensics (Live Session)
Objectives: Teaches the process of analyzing malware to understand its behavior, functionality, and impact. The module includes both static and dynamic analysis techniques.
The Key Takeaways and Final Points:
- Explain the evolution and significance of digital forensics.
- Describe the role and skills required for a digital forensics investigator.
- Grasp the steps of the digital forensics process from evidence identification to presentation.
- Comprehend how data is represented and managed in digital systems.
- Explain the differences and forensic implications of hard drives vs. SSDs.
- List various file systems and their impact on forensic analysis.
- Recognize the importance of hashing in ensuring data integrity.
Assignment Description: A workstation within your organisation’s network has exhibited unusual activity, and the SOC suspects it may have been compromised. Your job, as a forensic analyst, is to investigate the workstation and gather forensic evidence that can help you determine what happened. You will use various forensic tools to analyze Windows artifacts and uncover any suspicious activity.
Due Date: The assignment is expected to be completed within 10 days of its release date.
Pass score: You must score at least 6/10 to pass this assignment