EE547 Digital Forensics
Schedule
Wed 13h00-15h00 (lecture)
Wed 15h00-16h00 (labo)
References
- B. Carrier. “File System Forensic Analysis”, Addison Wesley, 2005, 569 p.
- M.H. Ligh et al., “The Art of Memory Forensics – Detecting Malware and Threats in Windows, Linux and Mac Memory”, Wiley, 2014, 886 p.
- Harlan Carvey, "Windows Forensic Analysis Toolkit: Advanced Analysis Techniques for Windows 8", 4th Edition, Syngress, 210, 350 p.
Resource
- All lab resources are available on your USB thumbdrive
- Aide-mémoire
- Online tutorial on dd utility
Wk |
Date |
Lectures |
References |
Others |
Laboratories |
|
1 |
16 Sep |
Carrier §1-3 |
|
(due 23 Sep at 13h00) |
|
|
2 |
23 Sep |
Carrier §4-7 |
|
Lab 2 - Volumes and Partitions (due 30 Sep at 13h00) |
|
|
3 |
30 Sep |
Carrier §8-10 |
|
(due 7 Oct at 13h00) |
|
|
4 |
7 Oct |
Carrier §11-13 |
|
(due 21 Oct at 13h00) |
|
|
5 |
14 Oct |
Carvey |
|
|
|
|
6 |
21 Oct |
Windows (con't) |
Carvey |
|
(due 4 Nov at 13h00) |
|
7 |
28 Oct |
Linux (con't) |
|
||
|
8 |
4 Nov |
Ligh §1, 3-5 Ligh §6 |
Paper selection |
(due 11 Nov at 13h00) |
|
|
9 |
11 Nov |
Remembrance Day |
|
(due on 18 Nov at 13h00) |
|
|
10 |
18 Nov |
Ligh §7-8 |
|
(due on 25 Nov at 13h00) |
|
|
11 |
25 Nov |
Ligh §13 |
|
(due on 2 Dec at 13h00) |
|
|
12 |
2 Dec |
Student presentations (schedule, eval sheet) |
|
Final exercise (Brief, Instructions) (due on 16 Dec at 13h00) |
|
|
13 |
9 Déc |
Final exercise |
|
|
|
|
14 |
16 Déc |
Final exercise |
|
|
|