Internet Forensics

What you will learn On successful completion of this course those attending will be able to: Explain the function and operation of common Internet protocols Interpret evidence recovered from the use of Web browsers Debate the attribution and reliability issues of Internet-derived evidence Recover evidence from Internet transactions.
Core content

• Internet history, addressing and services, including the role of Internet authorities and registries
• Internet architecture and protocols
• IP addresses and domains
• Web browser architectures and data
• SQLite database binary analysis and query structure
• ESE and index.dat data storage
• Web server administration forensics
• Social network artefacts
• Email
• Internet-specific crime.