Computer Security Forensics and System Recovery

Computer Security Forensics and System Recovery

Module 1 - Computer Forensics Overview

Define the computer forensics process
Describe the elements of the computer forensics process

Module 2 - Security Policies and Procedures

Describe why security policies and procedures need to be developed
Define the characteristics of an incident response policy and how it relates to forensic examination
Define the characteristics of an incident response procedure and how it relates to forensic examination

Module 3 - Security Compromise Detection and Identification

Identify indicators of a possible system compromise
Describe intrusion response tasks and roles

Module 4 - Computer Crime Scene Investigation

Describe fundamental crime scene investigation procedures
List the forensic tools and commands used at a crime scene
Describe how evidence is collected and secured

Module 5 - System Recovery

Describe the steps for platform reinstallation
Describe authentication mechanisms that must be changed after an attack

Module 6 - Mitigating Risk While Resuming Operations

Describe issues involved with system and network monitoring
Describe some additional security measures to protect against repeat attacks

Module 7 - Analyzing Typical Attack Patterns

Describe the methods used in remote attacks
Describe the methods used for obscuring remote attacks

Module 8 - Building the Forensic System

Explain why a forensic system is used
Describe the features of a forensic system

Module 9 - Filesystem Forensics

Use file timestamps in computer forensics
Describe obscure filesystem tools

Module 10 - Forensic Commands and Tools

Describe native commands and tools that are used in forensic examination
Describe third-party tools that might be used in forensic examination

Module 1 - Computer Forensics Overview

Define the computer forensics process
Describe the elements of the computer forensics process

Module 2 - Security Policies and Procedures

Describe why security policies and procedures need to be developed
Define the characteristics of an incident response policy and how it relates to forensic examination
Define the characteristics of an incident response procedure and how it relates to forensic examination

Module 3 - Security Compromise Detection and Identification

Identify indicators of a possible system compromise
Describe intrusion response tasks and roles

Module 4 - Computer Crime Scene Investigation

Describe fundamental crime scene investigation procedures
List the forensic tools and commands used at a crime scene
Describe how evidence is collected and secured

Module 5 - System Recovery

Describe the steps for platform reinstallation
Describe authentication mechanisms that must be changed after an attack

Module 6 - Mitigating Risk While Resuming Operations

Describe issues involved with system and network monitoring
Describe some additional security measures to protect against repeat attacks

Module 7 - Analyzing Typical Attack Patterns

Describe the methods used in remote attacks
Describe the methods used for obscuring remote attacks

Module 8 - Building the Forensic System

Explain why a forensic system is used
Describe the features of a forensic system

Module 9 - Filesystem Forensics

Use file timestamps in computer forensics
Describe obscure filesystem tools

Module 10 - Forensic Commands and Tools

Describe native commands and tools that are used in forensic examination
Describe third-party tools that might be used in forensic examination

Module 1 - Computer Forensics Overview

Define the computer forensics process
Describe the elements of the computer forensics process

Module 2 - Security Policies and Procedures

Describe why security policies and procedures need to be developed
Define the characteristics of an incident response policy and how it relates to forensic examination
Define the characteristics of an incident response procedure and how it relates to forensic examination

Module 3 - Security Compromise Detection and Identification

Identify indicators of a possible system compromise
Describe intrusion response tasks and roles

Module 4 - Computer Crime Scene Investigation

Describe fundamental crime scene investigation procedures
List the forensic tools and commands used at a crime scene
Describe how evidence is collected and secured

Module 5 - System Recovery

Describe the steps for platform reinstallation
Describe authentication mechanisms that must be changed after an attack

Module 6 - Mitigating Risk While Resuming Operations

Describe issues involved with system and network monitoring
Describe some additional security measures to protect against repeat attacks

Module 7 - Analyzing Typical Attack Patterns

Describe the methods used in remote attacks
Describe the methods used for obscuring remote attacks

Module 8 - Building the Forensic System

Explain why a forensic system is used
Describe the features of a forensic system

Module 9 - Filesystem Forensics

Use file timestamps in computer forensics
Describe obscure filesystem tools

Module 10 - Forensic Commands and Tools

Describe native commands and tools that are used in forensic examination
Describe third-party tools that might be used in forensic examination

Module 1 - Computer Forensics Overview

Define the computer forensics process
Describe the elements of the computer forensics process

Module 2 - Security Policies and Procedures

Describe why security policies and procedures need to be developed
Define the characteristics of an incident response policy and how it relates to forensic examination
Define the characteristics of an incident response procedure and how it relates to forensic examination

Module 3 - Security Compromise Detection and Identification

Identify indicators of a possible system compromise
Describe intrusion response tasks and roles

Module 4 - Computer Crime Scene Investigation

Describe fundamental crime scene investigation procedures
List the forensic tools and commands used at a crime scene
Describe how evidence is collected and secured

Module 5 - System Recovery

Describe the steps for platform reinstallation
Describe authentication mechanisms that must be changed after an attack

Module 6 - Mitigating Risk While Resuming Operations

Describe issues involved with system and network monitoring
Describe some additional security measures to protect against repeat attacks

Module 7 - Analyzing Typical Attack Patterns

Describe the methods used in remote attacks
Describe the methods used for obscuring remote attacks

Module 8 - Building the Forensic System

Explain why a forensic system is used
Describe the features of a forensic system

Module 9 - Filesystem Forensics

Use file timestamps in computer forensics
Describe obscure filesystem tools

Module 10 - Forensic Commands and Tools

Describe native commands and tools that are used in forensic examination
Describe third-party tools that might be used in forensic examination

Pages:- 1 2 3
[ Online / Live ] [ Corporate Training ] [ Locations ] [ Schools ] [ Job Seekers ]

Dear Visitor: You are strongly recommended to bookmark this page and come back later, since new course may be available anytime. Click to Proceed>>