Welcome
At Fields Associates, we specialise in the recovery of the digital “fingerprints” left by the routine use of computers. Even erased files can be recovered and examined, ensuring that you have all the evidence available to support your investigation.
Established in 1999, we have earned an impressive reputation in the detection, analysis and presentation of computer evidence in the broadest range of criminal activities. These include fraud, extortion, data theft, child pornography and Internet abuse.
Our clients include legal firms, international banks, blue chip companies, law enforcement and military organisations.
Courses > Introduction to Computer Evidence & the Internet (2 Days)
Course Title: Introduction to Computer Evidence & the Internet (2 Days)
Reference: CEI2
Duration: 16 Hours
[Courses Calendar]
Course Aim:
This course provides an overview of the relationship between computer forensic evidence and the Internet.
The course clarifies and explains the common Internet terms encountered during legal cases where computer evidence is involved, and also identifies the typical online originating sources of evidence.
Attendees will gain a theoretical and practical knowledge of a number of different types of software that use the Internet such as Peer-to-Peer programs and Forwarding Scripts.
The course also looks at the varied methods of file creation and the level of user involvement required (i.e. whether creation was intentional or due to automation).
Topics Covered:
- Web Browsing Software
- The operation of Temporary Internet Files
- Overview of Automatic Forwarding Scripts
- Search Engines
- Peer-to-Peer software
- Chat software
- Chat Forums
- Web Based Email
- The operation of Outlook & Outlook Express
- Newsgroups
Intended learning outcomes:
Upon completion of the course, students should have a fundamental understanding of the relationship between computer forensic evidence and the Internet, and how certain software programs associated with the Internet can be used in the creation of computer files.
Day 1
Course Timetable:
| 8.45am | Coffee and Registration |
| 9.00am | Introductions |
| 9.15am |
Introduction to the Internet
Summary of Activity A summary of the areas covered by the course followed by an introduction to the Internet, its origins and how it functions. |
| 10.30am |
IP Addresses
Summary of Activity A brief overview of Internet Protocol addresses. |
| 11.15am | Coffee Break |
| 11.30am |
Web Browsing Software
Summary of Activity A look at the operation of Internet Explorer and a comparison with other common web browsing software (e.g. MoZilla Firefox & Netscape Navigator). |
| 12.30pm |
Temporary Internet Files
Summary of Activity A look at the operation and behaviour of Temporary Internet Files, including demonstration and group participation. |
| 1.30pm | Lunch |
| 2.00pm | Temporary Internet Files - Continued |
| 3.00pm | Coffee Break |
| 3.15pm |
Automatic Forwarding Scripts
Summary of Activity A brief look at the nature of the scripts and their potential, focusing on the operation of the most commonly encountered forwarding scripts and their role in the creation of files within the Internet Cache Folder. |
| 4.15pm |
Web Based Search Engines
Summary of Activity The operation and behaviour of the most common Internet Search Engines (e.g. Google, MSN & Yahoo!) |
| 4.45pm |
Email
Summary of Activity An overview of the various types of web based email and email software (e.g. Outlook Express) and their operation, including Header and Time/Date Stamp information. |
| 5.45pm | Summary of Day, Questions |
| 6.00pm | Close |
Day 2
| 8.45am | Coffee |
| 9.00am |
Peer-to-Peer Software
Summary of Activity An introduction to the various types of peer-to-peer software available and their operation (e.g. KaZaA, Morpheus). This will include a hands-on demonstration of the most common software, including observations of methods of software installation, file download and sharing. |
| 11.15am | Coffee Break |
| 11.30am |
Chat Software
Summary of Activity An overview of the various types of chat software available and their operation (e.g. ICQ, IRC, Yahoo! & MSN Messenger). This will include a demonstration of the most common software type, file sharing and logging. |
| 12.30pm |
Chat Forums
Summary of Activity An introduction to the most common type of chat forum and how they operate. |
| 1.30pm | Lunch |
| 2.00pm |
Newsgroups
Summary of Activity An overview of newsgroups, including a demonstration of their operation and use. |
| 3.15pm | Coffee Break |
| 3.30pm |
Case Study
Summary of Activity A study of an actual case; revisiting the evidence, the origins of the evidence, the Defence response, and the outcome of the case. |
| 5.30pm | Summary of Day, Questions |
| 6.00pm | Close |
Certification: CPD