Advanced Digital Media Forensics
Art of Exploitation®: Advanced Digital Media Forensics Edition provides an in-depth look at forensic
acquisition and analysis of multiple types of media. Furthermore, the class will cover advanced automated tools, as
well as manual tools and methodologies. The course will outline a number of ways to achieve forensic goals, while
ensuring all processes are completed in a forensically sound manner. A variety of Windows artifacts, as well as
Internet, Chat, and Social Media artifacts will be a part of the classes’ focus. Additionally, data obfuscation
will be discussed as well as how to possibly obtain and analyze various types of data that was intended to be
hidden, overwritten, or deleted. Lastly, students will consider deploying discussed forensic methodologies in both
a proactive and reactive manner.
Provide an advanced analytical perspective with regards to data that can be considered of forensic value. Also, gain a
solid understanding of how the data is stored and how data can be recovered, using both automated and manual tools to
achieve the goals of acquisition and subsequent analysis. In addition, students will take a look at the multitude of
locations that data can be either retrieved or validated.
Class is approximately 50% hands on training and 50% instruction based training. A variety of digital images are provided for students.
- Forensic imaging using FTK Imager
- Forensically preparing target media using dc3dd
- Windows Event Logs
- Manual data carving
- Password Cracking