This Issue

• Course Outline:
• Must Attend:
• What you will take away from this course
• About Your Speaker

Course Information

Unsubscribe

2 Day Computer Forensics Investigation – A Practical Approach

If there is a computer on the premises of a crime scene, the chances are very good that there is valuable evidence on that computer

Accidental/planned destruction of data, hardware failure or cyber attack can happen anytime and organization may be called upon respond, investigation and escalate the analysis to a formal investigation.

Computer forensics is a branch of forensic science pertaining to legal evidence found in computer and digital storage mediums. It defines as preservation, identification, extraction, documentation and interpretation of computer media for evidentiary and/or root cause analysis.

Computer crime are rising every day, Fraud, identity theft, defamation, copyright, gambling, child pornography, anti-spamming and terrorist, etc.

Information is potentially one of an organization most valued asset and organization needs to able to protect those assets .One of the most common use of computer forensics is finding out what employees are doing during and none working hours.

They may involve of destroying of stealing valuable inside company information, or sharing that information with competitors or taking client from the company to start up a business. This programme is designed to introduce you the fundamental of computer crime and investigation concept.

Two reasons for instigating an investigation:

• Future prevention : by knowing what, when and who something happened which to able to combat and prevent or lessen impacts if future occurrences.
• Responsibility : victims have a responsibility to community to permit gathering analysis of evidence which may lead to prosecution, greater public awareness, and other potential victims to prepare defences aimed at preventing or lessening impact of future occurrences.

Information Systems Audit and Control Association Six Steps for Computer Forensics

• Preparation
  • Policies, Awareness, Forensics Team and Tools

• Detection
• IDS Alerts, Log Reviews, Etc.

• Response
• Crime ( Criminal or Civil)
• Forensics, Yes or NO?

• Seizure
• Safe Backups and logs
• Evidence identification and tagging
• Chain of Custody

• Discovery
• Lab Analysis
• Chain of Custody
• Expert witness

Course Outline:

Introduction

• Computer forensics and Digital investigation
• International Guidelines
• Computer Crime

Operation system

• Operation system and file structure
• Computer Forensics Tools

Investigation technique

• Define Evidence
• Rule of Evidence
• Collecting Evidence
• The Chain of evidence
• Write Blocker
• Cloning media
• Tools
• Case Study

Analysis

• Chain of Custody
• Hash calculation and checking
• Data Recovery
• Physical recovery / logical recovery

Forensics Data Recovery Tools M

• Forensics Tools
• Data recovery/ Various methods of file recovery
• File repair
• Disk repair
• Decryption
• Steganography
• Introduce forensics tools as X-way forensics and Forensics Toolkit (FTK)
• Case Study
• As part of the course you will receive the necessary shareware/Freeware tools to conduct the require analysis

Mobile Forensics

• Sim Card
• Physical/ Logical level
• Tools

Anti-Forensics

• Slack memory
• Disk Wiping
• Encryption
• Case Study

Must Attend:

This Master Class is specifically designed for key decision makers in both government agencies and private sectors:

• Senior officers from government & not-for- profit sector
• Non-IT executives who need to understand computer crime and forensics analysis
• GMs, Profit-Centre Managers who have assumed security/IT
• Sales & Marketing Managers
• Corporate Attorneys / Legal Professionals
• Engineers / Technical Managers
• Product & Marketing Managers
• Project Managers
• IT manager
• Security supervisor
• System administrator

What you will take away from this course

• X-way forensics 1 month full license
• Demo software which present during the presentation
• Free advisory section

About Your Speaker

Ali Fazeli has been involved in the information technology filed since his younger days. He later pursed his higher studies in the field of internet security and management from Curtin University, Australia. He is a highly interactive and innovative trainer, whose work in mainly based on research and applied knowledge from extensive experiences in Computer security and Data recovery. He has extensive experience in digital forensic investigation, Anti-forensic and cyber war.

During his 10 years career, Ali has assisted and trained numerous information technology security professional in Asia. He is accredited as a specialist in the successful investigation and prosecution of fraudsters and other scum from the dark and under world of internet. Today, Ali spent a substantial amount of his time in advising and trains IT security professionals in maritime industry. As the principal trainer and founder of infinity forensics, Ail has contributed extensively in helping numerous governments and private organizations to face the information technology risk and security. He has consulted and advised numerous organizations such as Nanyang polytechnic, Grant Thornton, Oscar maritime in Singapore.

He was involved in designing, planning and implementing a military tactical network and live image processing in 2007. Currently Ali has been approached by the law enforcement, and requested his knowledge and expertise in creating a customized training and education methodology for the sole purpose of investigating cyber criminals. Since 2007 his company Infinity forensics has been chosen as main partner of X-way software technology AG in Singapore.

Training experience:

• Disaster recovery and incident respond (Singapore - October 2006)
• Real-time image acquisition (China July-2007)
• WinHex, computer forensics and data recovery software training (Shenzhen December- 2007)
• Anti-Forensics VS computer forensic science (Singapore - March 2008)
• A practical approach to computer forensics investigation (Singapore September 2009)
• Penetration Testing and Cyber Defence (Singapore December 2009)
• Computer forensics and cyber security ( Singapore July- August 2010)