Basic Digital Media Forensics
Art of Exploitation®: Basic Digital Media Forensics Edition provides an introduction of media collection,
imaging, and analysis. Students will discuss file systems and partition structures, as well as how data is stored.
This is to better understand how and where data is stored on multiple types of digital media, and the best methods to access that data
The course will outline a number of ways to achieve forensic goals, while ensuring all processes are completed in a
forensically sound manner. Chain of custody and evidence handling will be addressed, as well as what to do and what not to do
when dealing with ‘live’ evidence.
This course is designed to provide a solid understanding of what is considered valuable digital media that can that can be used as forensic
evidence during the course of an investigation. Students will also gain a solid understanding of how data is stored and how to
retrieve data using multiple tools to achieve the goals of acquisition and analysis.
Class is approximately 50% hands on training and 50% instruction based training. A variety of digital images are provided for students.
- Forensic imaging using FTK Imager
- Forensically preparing target media using dc3dd
- Identifying and discussing various types of digital media that has been and could be useful in a forensic investigation
- Forensic analysis of a raw image using autopsy
- Exifdata analysis
- Viewing data in a hex editor and drafting a comprehensive forensic report