|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/digital-forensics-and-electronic-evidence/
课程评论：没有评论
课程名称：数字取证与电子证据 课程概述：随着科技迅猛发展，电子证据已成为几乎所有法庭案件中的潜在组成部分。因此，越来越多人需要了解电子证据，包括法律代表、案件相关人员或任何希望了解电视上常见情况的人。在多年法证咨询的过程中，我们发现法律专业人士及其他面对法律行动的人，在理解电子证据原则时常常面临困难，尤其当时间有限且缺乏技术背景时。对电子证据的正确理解能够增强案件的力度，往往能揭示对方在程序和证据上的弱点。 现有的资源往往技术性很强且难以把握，通常需要查阅多种资源才能了解一些基本原则。通过总结多年的实践经验，本课程旨在用简短的时间提供重要原则的扎实理解，而不需要深厚的技术背景。课程的目的不是培养专家，而是使个人具备足够的背景知识，以便知道在参与案件时需要进一步研究的关键领域。每个涉及电子证据的案件都有独特复杂性，但知道从何入手往往能大大简化问题。 课程假设学生只具备基本的计算机知识，无需法律背景，但也包含对拥有相关领域强大背景的人的有用资料。课程结束后，学生将能够： - 知道获取电子证据所需的权限类型。 - 知道必须遵循的程序，以确保电子证据不被更改且在法庭上可接受。 - 知道如何从计算设备中收集电子证据。 - 知道如何从移动设备中收集电子证据。 - 知道如何分析电子证据。 - 知道计算设备上可能找到哪种类型的证据。 - 知道应在法庭可用的合规法证报告中包含哪些内容。 - 能够识别证据及其收集过程中的弱点。 此外，该课程对考虑数字取证职业的人也大有裨益，帮助他们理解数字取证与计算机安全之间的区别。课中还提供了一份可供学生进行基本法证调查的免费软件列表，以帮助他们扩展技能。
With the extremely fast pace of technology development, electronic evidence has become a potential part of nearly all court cases. For this reason, many more people are now faced with the need to understand electronic evidence. This could be a legal representative, the person involved in a case or simply someone who would like to know more about the things we often see on television. During many years of forensics consulting, we have seen how difficult it is for legal professionals and other people faced with legal action to gain an understanding of the principals of electronic evidence, especially when there is limited time available and they do not have a strong technical background. A proper understanding can go a long way to strengthen a case as it often exposes weaknesses in the procedures and evidence used by the opposition. Few resources exist that gives an overview of the field and what is available, is often of a highly technical nature. Normally many resources need to be consulted to get an understanding of even some of the basic principles. By summarising many years of practical experience, the course aims at providing a solid understanding of the important principles in a short time without the need for a technical background. The purpose is not to create experts, but to give enough background knowledge to individuals to know the possible areas of importance that need further research for the cases they are involved in. Like any other court case, cases involving electronic evidence will have unique complexities, but knowing where to look will often simplify matters considerably. Only a very basic knowledge of computers and no legal background is assumed. Even so, the course contains material that will be useful to many people with a strong background in one or both of these fields. At the end of the course students will: Know what type of permission is needed to obtain electronic evidence. Know the procedures that must be followed to ensure that electronic evidence remains unchanged and admissible in court. Know how electronic evidence is collected from computer equipment. Know how electronic evidence is collected from mobile equipment. Know how electronic evidence is analysed. Know the types of evidence that is likely to be found on computing devices. Know what needs to be included in a proper forensic report that can be used by the court. Be able to identify weaknesses in evidence and the processes used to collect it. The course should also be useful for anyone considering a career in digital forensics, to understand the difference between digital forensics and computer security. This is important, as the perception is often that digital forensics is just a part of computer security that involves exciting opportunities for hacking, something that is certainly not the case. A list of freely available software that can be used by students to do basic forensic investigations is also given for those who would like to expand their skills.
