DFS 1.1 Intro to Cybercrime and Networks
Get started digital forensic science! Digital forensic science lets us recover data and investigate digital devices.
DFS101: Intro to Digital Forensic Science
DFS 1.2 Cybersecurity and Cybercrime
Get started digital forensic science! Digital forensic science lets us recover data and investigate digital devices.
DFS 2.1 Cybersecurity
Get started digital forensic science! Digital forensic science lets us recover data and investigate digital devices.
DFS 2.2 How hackers hack
Get started digital forensic science! Digital forensic science lets us recover data and investigate digital devices.
DFS 2.3 How to secure a Windows computer
Get started digital forensic science! Digital forensic science lets us recover data and investigate digital devices.
DFS 2.4 How to secure a Linux computer
Get started digital forensic science! Digital forensic science lets us recover data and investigate digital devices.
DFS 3.1 Intro to Computers
In this video, we introduce you to the main components of a computer system. The inside of a computer seems complicated, but just understanding the main comp...
DFS 3.1 Intro to Computers II
In this video, we introduce you to the main components of a computer system. The inside of a computer seems complicated, but just understanding the main comp...
DFS 3.2 Introduction to Network Analysis
In this video, we discuss how to collect and analyze data from a computer network (network traffic). Network traffic is a great source of information for inv...
DFS 3.3 Password attacks
In this video, we discuss password attacks and password cracking. This is to show how easy it is for an attacker to guess a large number of passwords with mo...
DFS 4.1 Basics of Cybercrime Investigation
In this video, we discuss how investigators begin to investigate cybercrime. We discuss crime detection, evidence collection, analysis, and reporting.
DFS 4.2 Digital Investigation Methods
In this video, we discuss general investigation methods and required skills that can be applied to online or offline investigations.
DFS 4.3 Electronic Evidence
In this video, we discuss fundamental concepts of digital evidence that will be used throughout the remainder of the course. Digital evidence is complicated ...
DFS 4.4 Documentation and Reporting for Digital Investigations
In this video, we describe how to create documentation and reports for digital investigations. Documentation and reporting are probably the most critical par...
DFS 5.1 Digital Investigation Definition
In this video, we describe the terms commonly used by digital investigators.
DFS 5.2 Scientific Method in Digital Investigations
In this video, we describe how criminal investigations and scientific investigations use the same processes to find the truth.
DFS 5.3 Digital Investigation Procedure
In this video, we describe investigation procedures used for digital investigations.
DFS 6.1 Data Storage
In this video, we show how data is stored and accessed on digital storage devices.
DFS 6.2 Data Structures
In this video, we talk about data structures. Specifically, how to understand what data means based on the structure it has. We introduce ways that forensic ...
DFS 6.3 Data Acquisition
In this video, we talk about the theory behind the forensic acquisition of data. Specifically, things to think about when starting to create a forensic image...
DFS 7.1 How data can be recovered
In this video, we talk about the theory of data recovery, how data structures are detected, and how these data structures are extracted from suspect data suc...
DFS 7.2 Data recovery with Photorec
In this video, we show how to use Photorec from the Windows Command Line to recover files (not just photos) from a target USB stick.
DFS 7.3 Data recovery with tsk_recover
In this video, we show how to use tsk_recover from the Linux Command Line to recover files (not just photos) from a target USB stick.
DFS 7.4 Data recovery with The Sleuth Kit
In this video, we show how to use The Sleuth Kit from the Linux Command Line to recover files (not just photos) from a target USB stick.
DFS 8.1 Location and Meaning of Data
In this video, we talk about common locations of data, and how where data is located can change it’s meaning.
DFS 8.2 How to start a new case in Autopsy 4
In this video, we show how to start a case and do initial forensic processing tasks with Autopsy 4.
DFS 8.3 Processing and analysis of a disk image with Autopsy 4 default modules
In this video, we explain what the basic Autopsy modules do and how they process suspect data to extract information. Then we give an overview of forensic da...
DFS 8.4 How to use hfind from the command line
In this video, we show how to use hfind, a hash-lookup tool, from the command line. Hfind is part of the sleuth kit and can be used to check data against a k...
DFS 8.5 How to add a hash database to Autopsy 4
In this video, we show how to add known-good and known-bad hash databases to Autopsy 4. Using hash sets in digital investigations helps the investigator hide...
DFS 9.1 Types of hacking
In this video, we discuss the different types of hackers, their motivations, goals, and techniques that they tend to use. All hackers are different, but ther...
DFS 9.2 Malware
In this video, we discuss the different types of malware that exist, how they infect systems, and what their particular goals are.
DFS 9.3 Social Engineering
In this video, we discuss social engineering techniques, and how social engineering is used to gain information useful to cybercrime investigations.
DFS 10.1 RAM Acquisition and Analysis
In this video, we discuss Random Access Memory (RAM). Specifically, what RAM is, how RAM works, and why it is important for digital investigations.
DFS 10.2 Forensic Memory Acquisition in Windows - FTK Imager
In this video, we discuss Random Access Memory and how to acquire a RAM image from a live system.
DFS 10.3 Forensic Memory Acquisition in Linux - LiME
In this video, we show how to acquire a RAM image from a Linux system using LiME.
DFS 10.4 Digital Forensic Memory Analysis - strings, grep and photorec
In this video, we show how to conduct a low-level analysis of a RAM image using strings, grep and photorec.
DFS 10.5 Digital Forensic Memory Analysis - Volatility
In this video, we show how to conduct an analysis of data structures in a RAM image using Volatility.
DFS 11.1 Mobile Device Investigations
This video will look at the many types of mobile devices, and what types of investigation-relevant information are available on these devices. Hands-on demon...
DFS 11.2 Mobile Device Acquisition
In this video, we will acquire a disk image from an android smart phone using ADB and rooting.
DFS 12.1 International nature of cybercrime
In this video, we will discuss how cybercrime investigation is complicated by jurisdiction and international cooperation issues.
DFS 12.2 Current state of international cooperation
In this video, we will discuss the main issue that makes cybercrime investigation difficult: international cooperation. Most cybercrimes have some internatio...
DFS 13.1 Research and the future of cybercrime investigation
In this video, we will discuss the need for research skills in digital investigation. Specifically, why investigators need to be able to conduct research, an...
DFS 13.2 Keeping up to date with digital forensics
In this video, we will discuss how to keep up to date and sustainably further your knowledge in digital forensics. There are many great resources available, ...
