Welcome
At Fields Associates, we specialise in the recovery of the digital “fingerprints” left by the routine use of computers. Even erased files can be recovered and examined, ensuring that you have all the evidence available to support your investigation.
Established in 1999, we have earned an impressive reputation in the detection, analysis and presentation of computer evidence in the broadest range of criminal activities. These include fraud, extortion, data theft, child pornography and Internet abuse.
Our clients include legal firms, international banks, blue chip companies, law enforcement and military organisations.
Courses > Introduction to Computer Evidence & the Internet (1 Day)
Course Title: Introduction to Computer Evidence & the Internet
Reference: CEI1
Duration: 8 Hours
[Courses Calendar]
Course Aim:
Computer Evidence & the Internet provides an introduction to the relationship between computer forensic evidence and the Internet.
The course clarifies and explains the common Internet terms encountered during legal cases where computer evidence is involved, and also identifies the typical online sources of such evidence.
Attendees will gain a theoretical and practical knowledge of a number of different types of software that use the Internet such as Peer-to-Peer programs and forwarding scripts.
The course also looks at the varied methods of file creation and the level of user involvement required (i.e. whether intentional or due to automation).
Topics Covered:
- Web Browsing Software
- The operation of Temporary Internet Files
- Overview of Automatic Forwarding Scripts
- Search Engines
- Peer-to-Peer software
- Chat software
- Chat Forums
- Web Based Email
- The operation of Outlook & Outlook Express
- Newsgroups
Intended learning outcomes:
Upon completion of the course, students should have a fundamental understanding of the relationship between computer forensic evidence and the Internet, and how certain software programs associated with the Internet can be used in the creation of computer files.
Course Timetable:
| 9.00am | Coffee and Registration |
| 9.15am | Introductions |
| 9.45am |
Introduction to the Internet
Summary of Activity A summary of the areas covered by the course followed by an introduction to the Internet, its origins and how it functions. |
| 10.30am |
Web Browsing Software
Summary of Activity A look at the operation of Internet Explorer and a comparison with other common web browsing software (e.g. MoZilla Firefox & Netscape Navigator) |
| 11.00am | Coffee Break |
| 11.15am |
Temporary Internet Files
Summary of Activity A look at the operation and behaviour of Temporary Internet Files, including demonstration and group participation. |
| 1.00pm | Lunch |
| 1.30pm |
Email
Summary of Activity An overview of the various types of web based email and email software (e.g. Outlook Express) and their operation, including Header and Time/Date Stamp information. |
| 2.00pm |
Peer-to-Peer Software
Summary of Activity An introduction to the various types of peer-to-peer software available and their operation (e.g. KaZaA, Morpheus). |
| 3.45pm | Coffee Break |
| 3.00pm |
Chat Software & Forums
Summary of Activity An overview of the various types of chat software available and their operation (e.g. ICQ, IRC, Yahoo! & MSN Messenger). This will include a demonstration of the most common software type, file sharing and logging. |
| 3.45pm |
Newgroups
Summary of Activity An overview of newsgroups, including a demonstration of their operation and use. |
| 4.30pm |
Case Study
Summary of Activity A study of an actual case; revisiting the evidence, the origins of the evidence, the Defence response, and the outcome of the case. |
| 5.30pm | Summary of Day, Questions |
| 6.00pm | Close |
Certification: CPD