Digital forensics

Section outline

• Select section Splošno / General

  Splošno / General

  Collapse all Expand all

   

  Predavatelj / Lecturer: Andrej Brodnik

  govorilne ure / office hours: tor / Tue - 6h

  Asistenta / Teaching assistants: Gašper Fele-Žorž, Aleks Huč

  urnik / Timetable

   

  Predavanja / Lectures

  Uvod in osnove / Introduction and basics
  Računalniki in OS MS Windows / Computers and OS MS Windows
  Datotečni sistemi na operacijskih sistemih Unix / Filesystem on Unix OS
  Osnove računalniških omrežij za potrebe forenzike / Basics of computer networks for digital forensics
  Mobilne naprave / Mobile devices
  Digitalna forenzika slik / Digital forensics of images
  Digitalna forenzika informacij odprtega tipa / Digital forensics of open source intelligence
  Digitalna forenzika v kazenskem postopku / Digital forensics in criminal procedure
  Izvajanje digitalne preiskave / Running digital investigation

   

  Vabljena predavanja / Invited lectures:

   

   

  Obveznosti / Course duties

  Domače naloge / Assignments

  Laboratorijske naloge / Lab assignments

  Pisni izpit / Written Exam

  Seminarska naloga / Essay

  • Select activity Razpored predavanj in vaj / Course schedule

    

    Razpored predavanj in vaj / Course schedule Page
  • Select activity Obveznosti pri predmetu / Course Requirements

    

    Obveznosti pri predmetu / Course Requirements Page
  • Select activity Navidezna učilnica, forumi / Virtual lecture-rooms...

    Navidezna učilnica, forumi / Virtual lecture-rooms, Forums
    

  • Select activity Forum novic

    

    Forum novic
  • Select activity Pogovori o predmetu

    

    Pogovori o predmetu Forum
  • Select activity Spletna učilnica / Internet classroom - BBB

    

    Spletna učilnica / Internet classroom - BBB BigBlueButton
  • Select activity IRC (#fri @ freenode)

    

    IRC (#fri @ freenode) URL
  • Select activity Gradivo / Material

    Gradivo / Material
    

  • Select activity Gradivo / Course materials

    

    Gradivo / Course materials Page
  • Select activity Recenzije / Reviews

    

    Recenzije / Reviews Folder

    Recenzentski obrazec in primera dobrih recenzij / Review form and examples of good reviews.

• Select section Uvod in osnove / Introduction and basics

  Uvod in osnove / Introduction and basics

  Poglavja / Chapters 1 - 5.

  • Select activity Predavanja / Lectures

    Predavanja / Lectures
    
  • Select activity Prosojnice, izročki in tabla / Slides, handouts and whiteboard

    

    Prosojnice, izročki in tabla / Slides, handouts and whiteboard Folder
  • Select activity Vaje / Exercises

    Vaje / Exercises
    
  • Select activity 1. Vaja: Virtualizacija in nastavitev omrežja

    

    1. Vaja: Virtualizacija in nastavitev omrežja URL
  • Select activity 2. Vaja: Diski in diskovni sistemi

    

    2. Vaja: Diski in diskovni sistemi URL
  • Select activity 3. Vaja: Analiza diskov z GNU/Linux

    

    3. Vaja: Analiza diskov z GNU/Linux URL
  • Select activity 1. Lab: Virtualization and network setup

    

    1. Lab: Virtualization and network setup URL
  • Select activity 2. Lab: Disks and disk systems

    

    2. Lab: Disks and disk systems URL
  • Select activity 3. Lab: Analysis of disks with GNU/Linux

    

    3. Lab: Analysis of disks with GNU/Linux URL
  • Select activity Stara navodila / Old instructions:

    Stara navodila / Old instructions:
    

  • Select activity Diski in diskovni sistemi

    

    Diski in diskovni sistemi Page
  • Select activity Uporaba GNU/Linux za računalniško forenziko

    

    Uporaba GNU/Linux za računalniško forenziko Page
• Select section Računalniki in OS MS Windows / Computers and OS MS Windows

  Računalniki in OS MS Windows / Computers and OS MS Windows

  Poglavji Chapters 15 & 17.

  • Select activity Predavanja / Lectures

    Predavanja / Lectures
    
  • Select activity Prosojnice, izročki in tabla / Slides, handouts and whiteboard

    

    Prosojnice, izročki in tabla / Slides, handouts and whiteboard Folder
  • Select activity Vaje / Exercises

    Vaje / Exercises
    
  • Select activity 5. Vaja: Windows register in dnevniki

    

    5. Vaja: Windows register in dnevniki URL
  • Select activity 6. Vaja: Iskanje uporabniških imen in gesel

    

    6. Vaja: Iskanje uporabniških imen in gesel URL
  • Select activity 5. Lab: Windows registry and logs

    

    5. Lab: Windows registry and logs URL
  • Select activity 6. Lab: Finding usernames and passwords

    

    6. Lab: Finding usernames and passwords URL
  • Select activity Stara navodila / Old instructions: (kopiraj)

    Stara navodila / Old instructions:
    

  • Select activity Windows registry, logging

    

    Windows registry, logging Page
  • Select activity Iskanje Windows ključev / finding keys in Windows

    

    Iskanje Windows ključev / finding keys in Windows Page
• Select section Datotečni sistemi na operacijskih sistemih Unix / Filesystem on Unix OS

  Datotečni sistemi na operacijskih sistemih Unix / Filesystem on Unix OS

  Poglavji / Chapters 18 & 19.

  • Select activity Predavanja / Lectures

    Predavanja / Lectures
    
  • Select activity Prosojnice, izročki in tabla / Slides, handouts and whiteboard

    

    Prosojnice, izročki in tabla / Slides, handouts and whiteboard Folder
  • Select activity Vaje / Exercises

    Vaje / Exercises
    
  • Select activity 7. Vaja: Beleženje pod operacijskim sistemom Linux

    

    7. Vaja: Beleženje pod operacijskim sistemom Linux URL
  • Select activity 7. Lab: Logging under the Linux operating system

    

    7. Lab: Logging under the Linux operating system URL
  • Select activity Stara navodila / Old instructions: (kopiraj) (kopiraj)

    Stara navodila / Old instructions:
    

  • Select activity Linux boot

    

    Linux boot Page
  • Select activity Bootloader, msramdump

    

    Bootloader, msramdump Page
  • Select activity Popravek za syslinux 3.61

    

    Popravek za syslinux 3.61 File
  • Select activity Keylogger, syslog, bash_history

    

    Keylogger, syslog, bash_history Page
• Select section Osnove računalniških omrežij za potrebe forenzike / Basics of computer networks for digital forensics

  Osnove računalniških omrežij za potrebe forenzike / Basics of computer networks for digital forensics

  Poglavje / Chapter 21.

  • Select activity Predavanja / Lectures

    Predavanja / Lectures
    
  • Select activity Prosojnice, izročki in tabla / Slides, handouts and whiteboard

    

    Prosojnice, izročki in tabla / Slides, handouts and whiteboard Folder
  • Select activity Vaje / Exercises

    Vaje / Exercises
    
  • Select activity E-pošta / E-mail

    

    E-pošta / E-mail Page
  • Select activity hrc.mail

    

    hrc.mail File
  • Select activity Example e-mail

    

    Example e-mail File

    Uploaded 19/04/23, 09:40
• Select section Mobilne naprave / Mobile devices

  Mobilne naprave / Mobile devices

  Poglavje / Chapter 20.

  • Select activity Predavanja / Lectures

    Predavanja / Lectures
    
  • Select activity Prosojnice, izročki in tabla / Slides, handouts and whiteboard

    

    Prosojnice, izročki in tabla / Slides, handouts and whiteboard Folder
  • Select activity Vaje / Exercises

    Vaje / Exercises
    
  • Select activity 4. Vaja: Metapodatki

    

    4. Vaja: Metapodatki URL
  • Select activity 9. Vaja: Forenzika mobilnih naprav

    

    9. Vaja: Forenzika mobilnih naprav URL
  • Select activity 4. Lab: Metadata

    

    4. Lab: Metadata URL
  • Select activity 9. Lab: Mobile Device Forensics

    

    9. Lab: Mobile Device Forensics URL
  • Select activity Stara navodila / Old instructions:

    Stara navodila / Old instructions:
    

  • Select activity Metapodatki / Metadata

    

    Metapodatki / Metadata Page
  • Select activity lovec-nabiralec.jpg

    

    lovec-nabiralec.jpg File
  • Select activity blinkenlichten.odt

    

    blinkenlichten.odt File
  • Select activity Android, N900, SIM

    

    Android, N900, SIM Page
  • Select activity Podatki s telefona N900

    

    Podatki s telefona N900 URL
  • Select activity Podatki s telefona Android

    

    Podatki s telefona Android URL
• Select section Digitalna forenzika slik / Digital forensics of images

  Digitalna forenzika slik / Digital forensics of images

  • Select activity Borut Batagelj: Slikovna biometrija v forenziki / Image-Based Biometrics in Forensic Science

    

    Borut Batagelj: Slikovna biometrija v forenziki / Image-Based Biometrics in Forensic Science Page
  • Select activity Predavanje / Lecture

    

    Predavanje / Lecture File
• Select section Digitalna forenzika informacij odprtega tipa / Digital forensics of open source intelligence

  Digitalna forenzika informacij odprtega tipa / Digital forensics of open source intelligence

  • Select activity Digitalna forenzika informacij odprtega tipa - Prosojnice

    

    Digitalna forenzika informacij odprtega tipa - Prosojnice File

    Uploaded 30/03/25, 14:00
• Select section Digitalna forenzika v kazenskem postopku / Digital forensics in criminal procedure

  Digitalna forenzika v kazenskem postopku / Digital forensics in criminal procedure

  Varstvo pravice do zasebnosti v kazenskem postopku
  Protection of the right to privacy in criminal procedure
  

  • Select activity Primož Gorkič: Kazenski postopek, zasebnost in preiskava elektronskih naprav

    

    Primož Gorkič: Kazenski postopek, zasebnost in preiskava elektronskih naprav File

    Uploaded 25/04/25, 07:27
  • Select activity Miha Hafner, Katja Šugman Stubbs: Kazenski pravosodni sistem

    

    Miha Hafner, Katja Šugman Stubbs: Kazenski pravosodni sistem Folder
  • Select activity Preiskava elektronske naprave

    

    Preiskava elektronske naprave Folder
  • Select activity Ustavno sodišče RS / Constitutional Court RS: Odločba Up-979/15-72

    

    Ustavno sodišče RS / Constitutional Court RS: Odločba Up-979/15-72 File

    Glej tudi / See also: https://www.us-rs.si/sl/zadeve-in-odlocitve/odlocitve/up-97915

    Uploaded 25/04/25, 07:32
• Select section Izvajanje digitalne preiskave / Running digital investigation

  Izvajanje digitalne preiskave / Running digital investigation

  Poglavji Chapters 6 & 7.

  • Select activity Predavanja / Lectures

    Predavanja / Lectures
    
  • Select activity Prosojnice, izročki in tabla / Slides, handouts and whiteboard

    

    Prosojnice, izročki in tabla / Slides, handouts and whiteboard Folder
  • Select activity Primer zapisnika o preiskavi elektronske naprave

    

    Primer zapisnika o preiskavi elektronske naprave File
  • Select activity Primer zapisnika o zavarovanju podatkov elektronske naprave

    

    Primer zapisnika o zavarovanju podatkov elektronske naprave File
  • Select activity Vaje / Exercises

    Vaje / Exercises
    
  • Select activity 8. Vaja: Zgodovina brskalnikov

    

    8. Vaja: Zgodovina brskalnikov URL
  • Select activity 10. Vaja: Prekoračitev medpomnilnika

    

    10. Vaja: Prekoračitev medpomnilnika URL
  • Select activity 11. Vaja: Izvajanje v naprej pripravljenih napadov

    

    11. Vaja: Izvajanje v naprej pripravljenih napadov URL
  • Select activity 12. Vaja: Forenzična analiza pomnilnika na računalniku

    

    12. Vaja: Forenzična analiza pomnilnika na računalniku URL
  • Select activity 13. Vaja: Steganografija

    

    13. Vaja: Steganografija URL
  • Select activity 8. Lab: Browser history

    

    8. Lab: Browser history URL
  • Select activity 10. Lab: Buffer overflow

    

    10. Lab: Buffer overflow URL
  • Select activity 11. Lab: Carrying out pre-prepared attacks

    

    11. Lab: Carrying out pre-prepared attacks URL
  • Select activity 12. Lab: Forensic analysis of computer memory

    

    12. Lab: Forensic analysis of computer memory URL
  • Select activity 13. Lab: Steganography

    

    13. Lab: Steganography URL
  • Select activity Stara navodila / Old instructions: (kopiraj)

    Stara navodila / Old instructions:
    

  • Select activity Zgodovina brskalnikov / browser history

    

    Zgodovina brskalnikov / browser history Page
  • Select activity Posnetek uporabniških datotek

    

    Posnetek uporabniških datotek File
  • Select activity Buffer overflow, apparmor

    

    Buffer overflow, apparmor Page
  • Select activity Sleuthkit, Autopsy

    

    Sleuthkit, Autopsy Page
  • Select activity Varno hranjenje podatkov / secure data storage

    

    Varno hranjenje podatkov / secure data storage Page
• Select section Vabljena predavanja / Invited lectures

  Vabljena predavanja / Invited lectures

  • Select activity Gorazd Božič: Kibernetski incidenti v praksi / Cyber incidents in practice

    

    Gorazd Božič: Kibernetski incidenti v praksi / Cyber incidents in practice Page
  • Select activity Računalniško preiskovanje in digitalna forenzika v slovenski Policiji / Computer investigation and Digital Forensics in Slovenian Police

    

    Računalniško preiskovanje in digitalna forenzika v slovenski Policiji / Computer investigation and Digital Forensics in Slovenian Police Page
  • Select activity Aleš Ažman: Preiskovalno delo zasebenega detektiva in digitalna forenzika / Investigative work of a private investigator and digital forensics

    

    Aleš Ažman: Preiskovalno delo zasebenega detektiva in digitalna forenzika / Investigative work of a private investigator and digital forensics Page
  • Select activity Modic, D. (2025). INFOSEC Psychology

    

    Modic, D. (2025). INFOSEC Psychology File

    Uploaded 12/03/25, 09:38
• Select section Pristopni kolokvij / Entrance exam

  Pristopni kolokvij / Entrance exam

  • Select activity Pristopni kolokvij bomo predvidoma pisali v tednu ...

    Pristopni kolokvij bomo predvidoma pisali v tednu med 11. in 15. marcem. / The entrance exam will take place in the week between 11th and 15th of March.

  • Select activity Poskusni pristopni kolokvij / Mock entrance exam

    

    Poskusni pristopni kolokvij / Mock entrance exam Quiz
  • Select activity KPOV Judge

    

    KPOV Judge URL
  • Select activity Uporabni ukazi, naprave in datoteke

    

    Uporabni ukazi, naprave in datoteke Page
  • Select activity Povzetek snovi za pristopni kolokvij / a short overview of requisite knowledge for the entrance exam

    

    Povzetek snovi za pristopni kolokvij / a short overview of requisite knowledge for the entrance exam URL
  • Select activity Stara vprašanja s pristopnih kolokvijev (ni za oceno) / Old entrance exam questions (not graded)

    

    Stara vprašanja s pristopnih kolokvijev (ni za oceno) / Old entrance exam questions (not graded) Quiz
• Select section Domače naloge / Assignments

  Domače naloge / Assignments

  • Select activity ##### Domače naloge / Homework

    Domače naloge / Homework

  • Select activity 0. domača naloga / Assignment 0

    

    0. domača naloga / Assignment 0
  • Select activity 1. domača naloga / Assignment 1

    

    1. domača naloga / Assignment 1 Quiz
  • Select activity 2. domača naloga / Assignment 2

    

    2. domača naloga / Assignment 2 Quiz
  • Select activity 3. domača naloga / Assignment 3

    

    3. domača naloga / Assignment 3 Quiz
  • Select activity 4. domača naloga / Assignment 4

    

    4. domača naloga / Assignment 4 Quiz
  • Select activity n. domača naloga / Assignment n

    

    n. domača naloga / Assignment n
• Select section Laboratorijske naloge / Lab assignments

  Laboratorijske naloge / Lab assignments

  • Select activity 1. laboratorijska naloga / Laboratory assignment 1

    

    1. laboratorijska naloga / Laboratory assignment 1
  • Select activity 2. in 3. laboratorijska naloga / Laboratory assignment 2 and 3

    

    2. in 3. laboratorijska naloga / Laboratory assignment 2 and 3
• Select section Pisni izpit / Written exam

  Pisni izpit / Written exam
• Select section Seminarska naloga / Essay

  Seminarska naloga / Essay

  Highlighted

  • Select activity Predstavitve / Presentations

    Predstavitve / Presentations
    

  • Select activity Predloge predstavitev s FRI CGP / Presentation template

    

    Predloge predstavitev s FRI CGP / Presentation template File
  • Select activity Razpored predstavitev / Schedule of presentations

    

    Razpored predstavitev / Schedule of presentations Page
  • Select activity Predstavitev / Presentation

    

    Predstavitev / Presentation Assignment
  • Select activity Predstavitve: moje mnenje / Presentations: my opinion

    

    Predstavitve: moje mnenje / Presentations: my opinion Assignment
  • Select activity Moje mnenje/My opinion: ocene in komentarji/marks and comments

    

    Moje mnenje/My opinion: ocene in komentarji/marks and comments Folder
  • Select activity Članek / Paper

    Članek / Paper
    

  • Select activity EasyChair

    

    EasyChair URL

    Tukaj oddate seminarsko nalogo in tudi recenzije. Pri tem se prijavite s poljubnim vašim e-naslovom. / Here you hand in the essay and also reviews. You login with your e-address.

    • 2. 3. 2025: izbira skupine / formation of the group
    • 9. 3. 2025: predizbira teme / preliminary choice of the topic
    • 16. 3. 2025: izbira teme / choice of the topic
    • 11. 5. 2025 podaljšano do/extended 18. 5. 2025: oddaja seminarske / handin the essay -- za oblikovanje uporabite navodila na https://authors.acm.org/proceedings/production-information/preparing-your-article-with-latex, pri čemer uporabite tip dokumenta sigconf / deadline for handing in essay; for formatting use instructions at use https://authors.acm.org/proceedings/production-information/preparing-your-article-with-latex and use format type sigconf (EasyChair)
    • 23. 5. 2025: rok za oddajo predstavitve / deadline for handing in the presentation
    • 25. 5. 2025 podaljšano do/extended 1. 6. 2025: rok za oddajo recenzij / deadline for handing in reviews (EasyChair)
    • 30. 5. in 6. 6. 2025: predstavitev esejev (konferenca predmeta)
    • 2. 6. 2025 podaljšano do/extended 16. 6. 2025: rok za oddajo končnega izdelka  / deadline for handing in the camera-ready essay (EasyChair)
    • 7. 6. 2025: rok za oddajo mnenja o predstavitvah / deadline to hand in the opinion on colleagues presentations

  • Select activity Zborniki iz preteklih let so na voljo tule / Proce...

    Zborniki iz preteklih let so na voljo tule / Proceedings from previous years are available here: http://lusy.fri.uni-lj.si/en/node/64.