F301 Digital Evidence First Response
-
Duration
2 Days
-
Level
Beginner
This training contains information and recommendations on internationally accepted forensics approaches for first response and subsequent examinations of devices containing different types of digital evidence. In this training, the relevant legal process and procedural issues are discussed in the stages of search, seizure, protection of the evidence chain, analysis, reporting, submission in the criminal / prosecution / judicial process, evidence evaluation, acceptability value, etc. of the professionals who have a legal basis or authority.
The practices related to the search and seizure of electronic and digital evidence are discussed in detail; It is aimed that information security personnel, law enforcement agencies, prosecutors, lawyers, and expert witnesses have the technical competence to follow the processes applied at the time of the first response. When the processes required for protecting “evidentiary feature” of the evidence are not complied at the time of first response, further investigations on evidence will be affected negatively.
MODULE 1 • Methodology of Digital Forensics • Digital Evidence Concept | MODULE 4 • Search And Seizure Phase | MODULE 7 • Special procedures (Mobile Devices, Cloud Data, Portable Computers, Portable Storage Media, GPS Devices, Digital Cameras, Servers, IoT Devices, Game Consoles, Smart Home Devices, Security Cameras, Virtual Wallets, Vehicles) |
MODULE 2 • Code Of Criminal Procedure • Penal Code | MODULE 5 • Volatile Data and RAM | |
MODULE 3 • Preparation Phase | MODULE 6 • Acquisition, Hash Concept and Usage |