From the course: CompTIA CySA+ (CS0-002) Cert Prep: 6 Incident Response
Unlock the full course today
Join today to access over 22,600 courses taught by industry experts or purchase this course individually.
Introduction to forensics
From the course: CompTIA CySA+ (CS0-002) Cert Prep: 6 Incident Response
Introduction to forensics
- [Narrator] Information security professionals, often find themselves asked to participate in many different types of investigations. In some cases, these are purely technical investigations of security incidents or other unusual circumstances. In other cases, security professionals may be called upon to assist law enforcement or other authorities in criminal and civil court cases. When asked to participate in the evaluation of electronic evidence, security professionals engage in a field known as digital forensics. The goal of digital forensics is to collect, preserve, analyze, and interpret digital evidence in support of an investigation. This includes everything from pulling data from a smartphone or laptop to analyzing network traffic logs. Digital forensic investigators have a wide variety of tools and techniques at their disposal, and must follow some basic principles when working with evidence. One of the…
Contents
-
-
-
-
-
-
(Locked)
Conducting investigations5m 7s
-
(Locked)
Evidence types3m 51s
-
(Locked)
Introduction to forensics4m 6s
-
(Locked)
System and file forensics4m 17s
-
(Locked)
File carving3m 1s
-
(Locked)
Creating forensic images5m 36s
-
Digital forensics toolkit3m 13s
-
(Locked)
Operating system analysis6m 25s
-
Password forensics8m 9s
-
(Locked)
Network forensics4m 50s
-
(Locked)
Software forensics3m 32s
-
(Locked)
Mobile device forensics1m 32s
-
(Locked)
Embedded device forensics2m 50s
-
(Locked)
Chain of custody2m 13s
-
(Locked)
Ediscovery and evidence production3m 15s
-
(Locked)
-