Welcome
At Fields Associates, we specialise in the recovery of the digital “fingerprints” left by the routine use of computers. Even erased files can be recovered and examined, ensuring that you have all the evidence available to support your investigation.
Established in 1999, we have earned an impressive reputation in the detection, analysis and presentation of computer evidence in the broadest range of criminal activities. These include fraud, extortion, data theft, child pornography and Internet abuse.
Our clients include legal firms, international banks, blue chip companies, law enforcement and military organisations.
Courses > Introduction to Computer Forensics (1 Day)
Course Title: Introduction to Computer Forensics
Reference: ICF1
Duration: 8 Hours
[Courses Calendar]
Course Aim:
The Introduction to Computer Forensics course provides attendees with a basic knowledge of digital forensic examinations, and shows how evidential findings are applied within criminal and civil cases.
The course provides an overview of the tools and techniques used, the types of digital storage media likely to be encountered, and clear explanations of the terminology and software commonly found within cases involving computer evidence. The course also highlights the areas of law most relevant to cases involving digital forensic evidence.
Finally, the course reviews the topics covered in relation to an actual case. This part of the study assesses the documentary evidence paper trail, the forensic examination, findings, and the eventual outcome of the case.
Topics Covered:
- Introduction to Computer Forensics and Computer Evidence
- Types of digital storage media
- An explanation of common terms encountered in computer evidence cases
- Explanation and demonstration of file Time/Date Stamps
- Software commonly encountered when dealing with computer forensic evidence
- A review of Stated Cases involving computer forensic evidence
Intended learning outcomes:
Upon completion, students should have a fundamental understanding of Computer Forensics, i.e. a basic knowledge of the process, application, and effectiveness of digital forensics, and how resultant evidence can be applied within legal cases.
Course Timetable:
| 8.45am | Coffee and Registration |
| 9.00am | Introductions |
| 9.15am |
Introduction to Computer Forensics Summary of Activity An introduction to the concepts of Computer Forensics and Computer Evidence and a brief explanation of how they are applied within criminal and civil cases. A brief look at the common types of cases that involve Computer Evidence. |
| 10.15am |
Types of Digital Media
Summary of Activity A look at the various types of digital storage media commonly encountered in computer forensic cases. |
| 11.15am | Coffee Break |
| 11.30am |
Logical/Physical Partitions & Time/Date Stamps
Summary of Activity An explanation of ‘partitions’ and a look at the behaviour of Time/Date Stamps. This section includes an explanation of the various Time/Date stamps retained by computer systems and what they represent. |
| 12.30pm |
Commonly Encountered Technical Terms & Software
Summary of Activity A look at Key Terms encountered during cases involving Computer Forensics, including Temporary Internet Files, Unallocated Clusters, Live Clusters, Trojan Viruses, along with a practical demonstration of the most common. |
| 1.30pm | Lunch |
| 2.00pm |
Commonly Encountered Technical Terms & Software – Continued
Summary of Activity An explanation and demonstration of peer-to-peer software (e.g. KaZaA, Morpheus, ICQs). |
| 2.45pm |
Commonly Encountered Software
Summary of Activity A brief explanation and demonstration of peer-to-peer software (e.g. KaZaA, Morpheus, ICQs). |
| 3.45pm | Coffee Break |
| 4.00pm |
Stated Cases
Summary of Activity A review of the most relevant stated cases involving computer evidence. |
| 4.45pm |
Case Study
Summary of Activity A study of an actual case looking at the paper trail of evidence, the forensic examination, digital findings, and the Defence response. The eventual outcome of the case is then assessed in relation to the areas covered throughout the course. |
| 5.45pm | Summary of Day, Questions |
| 6.00pm | Close |
Certification: CPD