Digital forensics

Topic outline

• 

  Splošno / General

  
  

  Predavatelj / Lecturer: Andrej Brodnik

  govorilne ure / office hours: tor / Tue - 6h

  Asistenta / Teaching assistants: Gašper Fele-Žorž, Aleks Huč

  urnik / Timetable

  
  

  Predavanja / Lectures

  Uvod in osnove / Introduction and basics
  Računalniki in OS MS Windows / Computers and OS MS Windows
  Datotečni sistemi na operacijskih sistemih Unix / Filesystem on Unix OS
  Osnove računalniških omrežij za potrebe forenzike / Basics of computer networks for digital forensics
  Mobilne naprave / Mobile devices
  Digitalna forenzika slik / Digital forensics of images
  Digitalna forenzika informacij odprtega tipa / Digital forensics of open source intelligence
  Digitalna forenzika v kazenskem postopku / Digital forensics in criminal procedure
  Izvajanje digitalne preiskave / Running digital investigation
  

  
  

  Vabljena predavanja / Invited lectures:

  Gorazd Božič: Kibernetski incidenti v praksi / Cyber incidents in practice
  Aleš Ažman: Preiskovalno delo zasebenega detektiva in digitalna forenzika / Investigative work of a private investigator and digital forensics
  

  
  

  Obveznosti / Course duties

  Domače naloge / Assignments

  Laboratorijske naloge / Lab assignments

  Seminarska naloga / Essay

  • Razpored predavanj in vaj / Course schedule Page
  • Obveznosti pri predmetu / Course Requirements Page
  • Navidezna učilnica, forumi / Virtual lecture-rooms, Forums
    

  • Forum novic
  • Pogovori o predmetu Forum
  • Spletna učilnica / Internet classroom - BBB BigBlueButton
  • IRC (#fri @ freenode) URL
  • Gradivo / Material
    

  • Gradivo / Course materials Page
• 

  Uvod in osnove / Introduction and basics

  Poglavja / Chapters 1 - 5.

  • Predavanja / Lectures
    
  • Prosojnice, izročki in tabla / Slides, handouts and whiteboard Folder
  • Vaje / Exercises
    
  • 1. Vaja: Virtualizacija in nastavitev omrežja URL
  • 2. Vaja: Diski in diskovni sistemi URL
  • 3. Vaja: Analiza diskov z GNU/Linux URL
  • 1. Lab: Virtualization and network setup URL
  • 2. Lab: Disks and disk systems URL
  • 3. Lab: Analysis of disks with GNU/Linux URL
  • Stara navodila / Old instructions:
    

  • Diski in diskovni sistemi Page
  • Uporaba GNU/Linux za računalniško forenziko Page
• 

  Računalniki in OS MS Windows / Computers and OS MS Windows

  Poglavji Chapters 15 & 17.

  • Predavanja / Lectures
    
  • Prosojnice, izročki in tabla / Slides, handouts and whiteboard Folder
  • Vaje / Exercises
    
  • 5. Vaja: Windows register in dnevniki URL
  • 5. lab: Windows registry and logs URL
  • Stara navodila / Old instructions:
    

  • Windows registry, logging Page
  • Iskanje Windows ključev / finding keys in Windows Page
• This topic
  

  Datotečni sistemi na operacijskih sistemih Unix / Filesystem on Unix OS

  Poglavji / Chapters 18 & 19.

  • Predavanja / Lectures
    
  • Prosojnice, izročki in tabla / Slides, handouts and whiteboard Folder
  • Vaje / Exercises
    
  • Linux boot Page
  • Bootloader, msramdump Page
  • Popravek za syslinux 3.61 File
  • Keylogger, syslog, bash_history Page
• 

  Osnove računalniških omrežij za potrebe forenzike / Basics of computer networks for digital forensics

  Poglavje / Chapter 21.

  • Predavanja / Lectures
    
  • Prosojnice, izročki in tabla / Slides, handouts and whiteboard Folder
  • Vaje / Exercises
    
  • E-pošta / E-mail Page
  • hrc.mail File
• 

  Mobilne naprave / Mobile devices

  Poglavje / Chapter 20.

  • Predavanja / Lectures
    
  • Prosojnice, izročki in tabla / Slides, handouts and whiteboard Folder
  • Vaje / Exercises
    
  • 4. Vaja: Metapodatki URL
  • 4. Lab: Metadata URL
  • Stara navodila / Old instructions:
    

  • Metapodatki / Metadata Page
  • lovec-nabiralec.jpg File
  • blinkenlichten.odt File
  • Android, N900, SIM Page
  • Podatki s telefona N900 URL
  • Podatki s telefona Android URL
• 

  Digitalna forenzika slik / Digital forensics of images

  • Borut Batagelj: Slikovna biometrija v forenziki / Image-Based Biometrics in Forensic Science Page
• 

  Digitalna forenzika informacij odprtega tipa / Digital forensics of open source intelligence

  • David Modic: Zbiranje informacij odprtega tipa in človeški vektorji napada / Open source intelligence gathering (OSINT) and human attack vectors Page
  • OSINT in INFOSEC File Uploaded 4/04/22, 14:39
  • Measuring the cost of Cybercrime File Uploaded 4/04/22, 14:43
  • Mate selection—A selection for a handicap File Uploaded 4/04/22, 14:44
• 

  Digitalna forenzika v kazenskem postopku / Digital forensics in criminal procedure

  Varstvo pravice do zasebnosti v kazenskem postopku
  Protection of the right to privacy in criminal procedure
  
• 

  Izvajanje digitalne preiskave / Running digital investigation

  Poglavji Chapters 6 & 7.

  • Predavanja / Lectures
    
  • Prosojnice, izročki in tabla / Slides, handouts and whiteboard Folder
  • Primer zapisnika o preiskavi elektronske naprave File
  • Primer zapisnika o zavarovanju podatkov elektronske naprave File
  • Vaje / Exercises
    
  • Zgodovina brskalnikov / browser history Page
  • Posnetek uporabniških datotek File
  • Buffer overflow, apparmor Page
  • Sleuthkit, Autopsy Page
  • Varno hranjenje podatkov / secure data storage Page
• 

  Vabljena predavanja / Invited lectures

  • Aleš Ažman: Preiskovalno delo zasebenega detektiva in digitalna forenzika / Investigative work of a private investigator and digital forensics Page
• 

  Domače naloge / Assignments

  • Domače naloge / Homework

  • 0. domača naloga / Assignment 0
  • 1. domača naloga / Assignment 1 Quiz
  • 2. domača naloga / Assignment 2 Quiz
  • 3. domača naloga / Assignment 3 Quiz
  • 4. domača naloga / Assignment 4 Quiz
• 

  Laboratorijske naloge / Lab assignments
• 

  Pisni izpit / Written exam

  • ---

• 

  Seminarska naloga / Essay

  • Predstavitve / Presentations
    

  • Predloge predstavitev s FRI CGP / Presentation template File
  • Članek / Paper
    

  • EasyChair URL

    Tukaj oddate seminarsko nalogo in tudi recenzije. Pri tem se prijavite s poljubnim vašim e-naslovom. / Here you hand in the essay and also reviews. You login with your e-address.

    • rok za oddajo seminarske: 7. 5. opolnoči; za oblikovanje uporabite http://matcos.iam.upr.si/en/resources/files/paper-submission/template.zip  / deadline for handing in essay: May 7^th, midnight; for formatting use http://matcos.iam.upr.si/en/resources/files/paper-submission/template.zip (EasyChair)
      
    • rok za oddajo recenzije: 21. 5. opolnoči / deadline for handing in review: May 21^st, midnight (EasyChair)
      
    • rok za oddajo predstavitve: 17. 5. @ 23:55 / deadline for handing in the presentation: May 1^7th @ 11:55pm
      
    • rok za oddajo končnega izdelka: 29. 5. opolnoči / deadline for handing in the camera-ready essay: May 29^th, midnight (EasyChair)
      

    
    
  • Zborniki iz preteklih let so na voljo tule / Proceedings from previous years are available here: http://lusy.fri.uni-lj.si/en/node/64.