Course list http://www.c-jump.com/bcc/

Week 4 -- issues related to bits, bytes, attorneys, courts, and so forth.

  1. forensic examination
  2. computer crimes
  3. computer evidence
  4. untrained examiner
  5. trained examiner
  6. licensed software
  7. using properly licensed software
  8. exculpatory evidence
  9. exculpatory evidence -- civil matters
  10. competent forensic examination -- sterile examination media
  11. competent forensic examination -- integrity of the original media
  12. competent forensic examination -- management of findings
  13. write-protect capability
  14. write-protect capability -- floppy
  15. examination media
  16. sanitization of examination media
  17. previous examination cases
  18. floppy diskette wipe and verify
  19. examination media preparation
  20. computer media examination
  21. evidence drive preservation
  22. disk drive geometry
  23. disk drive geometry, cont.
  24. practical problems related to disk drive geometry
  25. bit
  26. byte
  27. nibble
  28. ASCII characters
  29. ASCII characters, cont
  30. LBA
  31. forensic bitstream copy
  32. POST
  33. DOS
  34. multitasking operating systems
  35. network topology
  36. large networks
  37. keyboards
  38. individual's right to privacy
  39. individual's right to privacy example
  40. individual's privacy, cont
  41. consent to examine magnetic media
  42. email
  43. legality of the collection
  44. involuntary collection of magnetic media
  45. methods to acquire magnetic media
  46. methods to acquire magnetic media, cont.
  47. methods to acquire magnetic media, cont.
  48. methods to acquire magnetic media, cont.
  49. methods to acquire magnetic media, cont.
  50. methods to acquire magnetic media, cont.
  51. methods to acquire magnetic media, cont.
  52. office computer examination
  53. office computer examination, cont.
  54. office computer examination, cont.
  55. chain of custody
  56. chain of custody, cont.
  57. first sector of a harddrive
  58. booting
  59. boot sector
  60. file system
  61. FAT
  62. free cluster
  63. root directory
  64. root directory, cont.
  65. never used directory entry
  66. directory entry size
  67. directory entry structure
  68. FAT16 root directory max entries
  69. FAT32 root directory max entries
  70. FAT data area
  71. sub-directories
  72. sectors and clusters
  73. file creation
  74. file deletion
  75. file deletion, cont
  76. FDISK
  77. FORMAT
  78. plug and play
  79. file recovery
  80. deleted file