|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/advanced-computer-forensics/
课程评论：没有评论
课程名称：高级计算机取证 课程概述：本课程专为具备计算机取证基础知识的人设计，旨在深入探讨该领域的特定技能和技术。课程内容涵盖了获取一些比标准PC更具易变性或更难以访问的设备的技术，并详细讲解了相关技术。本课程是继《计算机取证基础》和《中级计算机取证》之后的第三门课程，尽管建议先修这两门课程，但并不是必修的，因为它们在教授的主题上是独立的。 高级计算机取证内容包括： - 内存获取与分析 - Windows注册表取证 - 注册表蜂窝和NTUSER.dat - USB和网络连接 - 实时取证获取 - 搜索签名 - 非传统设备（物联网）、游戏系统、无人机和相机系统 - 法庭作证 课程将通过讲座讲解计算机取证的概念，并展示合适的软件和数码证据的收集过程，使用主要的开源或免费软件，以便学生能够在自己的设备上复制这些演示。此外，课程还将通过测验强化所学概念。 本课程旨在任何对计算机取证感兴趣的人，让学员深入了解数字取证检查的真实世界。作为一门高级课程，它将包含演示、动手实践和测验。
This course is designed for people with a working knowledge of computer forensics but looking to go deeper into specific skill and techniques of the the field. We cover techniques and examine devices that are more volatile or more difficult to access than a standard PC acquisition. This is the third course following my pervious course Computer Forensics Fundamentals and Intermediated Computer Forensics. While those course are recommended it is not required to take this course as they are independent in regard to topics taught. Advanced Computer Forensics will provide: Ram Acquisition and AnalysisWindows registry forensicsHives and NTUSER.datUSB and network connectionsLive forensic acquisitionsSearch SignaturesNon-traditional devices (Internet of Things), games systems, drones and camera systemsTestifying in a court of lawThe course will consist of presentations to explain the concepts of computer forensics as well as demonstrations of proper software and collections of digital evidence, using primary open source or free software so that students can replicate the demonstrations on their own. Quizzes will reenforce the concepts.This course is designed for anyone with an interest computer forensics to get a deeper taste of the real world of digital forensics examination. As an advanced course it will consist of presentations, hands on lessons and quizs.
