קורס אבטחה - פריצת רשתות

פרוט תכני הקורס

Day 1

● What is Forensics
● The Goals of Forensics
● Common types of Forensics cases
● Types of Evidence
● Stages of the Forensics Process
● The Limits of Forensics
● The Israeli Law
● Preparing for Forensics
● Forensics and SIRT
● Data Acquisition Process
● Order of Volatility
● Volatile Data
● Duplicating Hard-drives

Day 2

● RAID
● RAID Levels
● Duplicating RAID
● Hard Disks Interfaces: SCSI
● Hard Disks Interfaces: IDE/EIDS
● Hard Disks Interfaces: USB
● Hard Disks Interfaces: ATA/SATA
● Hard Disks Interfaces: Fibre Channel
● Digital Media: Floppy
● Digital Media: CD-ROM
● Digital Media: DVD (+-R, +-RW)
● Digital Media: HD-DVD
● Digital Media: Blu-Ray
● Digital Media: USB Flash Drive
● Digital Media: SD/CF/MMC/MS/SM
● Windows Boot Sequence
● FAT 32 Filesystem
● NTFS Filesystem
● NTFS Alternate Data Streams
● NTFS Junctions

Day 3

● Recovering Deleted files
● Recovering from Slack Space
● Start-up files
● Filesystem Times Analysis
● Logs Analysis
● Event Log Analysis
● Web-Server Log Analysis

Day 4

● Image Analysis
● Steganography
● Password Cracking
● Software Analysis and Reverse Engineering
● Network Traffic Analysis
● Tracking eMail

Day 5

● Final Exercise
● Compiling Reports
● Data Destruction
● Anti-Forensics