Course

Course Summary
Credit Type:
Course
ACE ID:
DDCI-0021
Organization's ID:
CIRC-RES
Location:
Classroom-based
Length:
10 days (80 hours)
Dates Offered:
Credit Recommendation & Competencies
Level Credits (SH) Subject
Lower-Division Baccalaureate 3 digital forensics
Lower-Division Baccalaureate 3 incident response
Description

Objective:

The course objective is to provide incident response curriculum for DCIOs, federal law enforcement personnel, and computer intrusions investigator.

Learning Outcomes:

  • Using an initial communication, collect relevant information in preparation for pre-deployment of a cyber forensic incident response
  • Using a course scenario, use best practices to assume control of a scene
  • Given a live system, determine the risks involved when conducting a forensic investigation (for example, risks of system crash, and intentional or unintentional altering of data)
  • Given a real-world scenario, collect evidentiary data during an active intrusion of a live local system
  • Given a crime scene, collect a forensic image of a fixed disk in accordance with industry standards
  • Given a scenario, explain ways in which IoT devices can be used to expand cyber investigations and outline their storage capabilities (e.g., GPS, smart devices, wearables, and drones)
  • Using the responder toolkit, create a forensically sound image of a cellphone
  • Using best practices, explain techniques used to package and store media to avoid loss, physical damage, or destruction of data

General Topics:

  • Preparations
  • Assuming control of an IR scene
  • Collecting forensic data from a live system
  • Collecting forensic data during an active intrusion
  • Dead box/hard drive image collections
  • Collecting IoT and mobile devices as digital evidence
  • Evidence handling
Instruction & Assessment

Instructional Strategies:

  • Audio Visual Materials
  • Case Studies
  • Classroom Exercise
  • Computer Based Training
  • Laboratory
  • Lectures
  • Practical Exercises
  • Project-based Instruction

Methods of Assessment:

  • Case Studies
  • Examinations
  • Quizzes

Minimum Passing Score:

70%
Supplemental Materials