CHFI - Module 1

Understand the Fundamentals of Computer Forensics

Computer forensics plays a key role in tracking, investigating, and prosecuting cybercriminals. This section introduces computer forensics and its objectives. It also elaborates on why and when various enterprises may need to conduct a computer forensic investigation

Understanding Computer Forensics.

Need for Computer Forensics.

Why and When Do You Use Computer Forensics?

Need for Computer forensics

An exponential increase in the number of cybercrimes and civil litigations involving large organizations has emphasized the need for computer forensics. It has become a necessity for organizations to employ the service of a computer forensics agency or to hire a computer forensics expert to solve cases involving the use of computers and related technologies. The staggering financial losses caused by cybercrimes have also contributed to renewed interest in computer forensics. Computer forensics plays an important role in tracking cybercriminals. The main role of computer forensics is as follows:

Why and When Do You Use Computer Forensics?

Computer forensics is required when a computer-based crime occurs, and as mentioned earlier, such crimes are increasing worldwide. Organizations need to employ the services of a computer forensics agency or hire a computer forensics expert to solve crimes that involve computers and related technologies. The staggering financial losses caused by cybercrimes have also contributed to a renewed interest in computer forensics.

Introduction to Digital Evidence

Types of Digital Evidence

Roles of Digital Evidence

Sources of Potential Evidence

Sources of Potential Evidence (Cont’d)

Sources of Potential Evidence (Cont’d)

Sources of Potential Evidence (Cont’d)

Rules of Evidence

Best Evidence Rule

Federal Rules of Evidence (United States)

Federal Rules of Evidence (US) (Cont’d)

Federal Rules of Evidence (US) (Cont’d)

Federal Rules of Evidence (US) (Cont’d)

Federal Rules of Evidence (US) (Cont’d)

Federal Rules of Evidence (US) (Cont’d)

Federal Rules of Evidence (US) (Cont’d)

Scientific Working Group on Digital Evidence (SWGDE)

Scientific Working Group on Digital Evidence (Cont’d)

The Association of Chief Police Officers (ACPO) Principles of Digital Evidence

Forensic Readiness and Business Continuity

Title

Forensics Readiness Planning

Title

Incident Response

Title

Computer Forensics as a Part of Incident Response Plan

Title

Overview of Incident Response Process Flow

Title

Role of SOC in Computer Forensics

Title

Roles and Responsibilities of a Forensics Investigator

Title

What Makes a Good Computer Forensics Investigator?

Title

Code of Ethics

Title

Accessing Computer Forensics Resources

Title

Challenges Cybercrimes Pose to Investigators

Other Factors That Influence Forensic Investigations

Computer Forensics: Legal Issues

Computer Forensics: Privacy Issues

Computer Forensics and Legal Compliance

Other Laws Relevant to Computer Forensics

Module Summary