Theory class slides
- Class 01 - Introduction
- Class 02 - Digital Evidence
- Class 03 - Forensic Tools
- Class 04 - Cybercrime Tools
- Class 05 - Legal Framework
- Class 06 - Investigation Models
- Class 07 - Evidence Acquisition
- Class 08 - Identity Tracking
- Class 09 - Location Tracking
- Class 10 - Activity Reconstruction
- Class 11 - Data Interpretation and Storage Analysis
- Class 12 - File System Analysis
- Class 13 - File System Forensic Techniques
- Class 14 - Windows Forensic Analysis
- Class 15 - Traffic Analysis
- Class 16 - Email and Web Forensics
- Class 17 - Anonymization
- Class 18 - Trail Obfuscation I
- Class 19 - Trail Obfuscation II
- Class 20 - Data Hiding and Conclusions
Lab guides
- Lab Guide I - Introduction to Forensic Tools
- Lab Guide II - Case Solving I: The Rhino Hunt
- Lab Guide III - Case Solving II: Harassment at Nitroba University
- Lab Guide IV - Case Solving III: M57-Jean
Exams
Attachments
- csf1617-01-introduction.pdf
- csf1617-02-digital_evidence.pdf
- csf1617-03-forensic_tools.pdf
- csf1617-04-cybercrime_tools.pdf
- csf_lab1.pdf
- csf1617-05-legal_framework.pdf
- csf1617-06-investigation_models.pdf
- csf1617-07-evidence_aquisition.pdf
- csf_lab2.pdf
- csf_lab3.pdf
- csf1617-08-identity_tracking.pdf
- csf1617-09-location_and_time_tracking.pdf
- csf_lab4.pdf
- csf1617-10-activity_reconstruction.pdf
- csf1617-12-file_system_analysis.pdf
- csf1617-11-data_interpretation_and_storage_analysis.pdf
- csf1617-14-windows_forensic_analysis.pdf
- csf1617-13-file_reconstruction_techniques.pdf
- csf1617-16-email_and_web_forensics.pdf
- csf1617-15-traffic_analysis.pdf
- csf1617-17-anonymization.pdf
- csf1617-18-trail_obfuscation_i.pdf
- csf1617-20-data_hiding_and_conclusions.pdf
- csf1617-19-trail_obfuscation_ii.pdf
- sample-exam.pdf
- csf1617-exam1.pdf
- exam.pdf