MIT601 · Semester III · Official Syllabus

Cybersecurity and Digital Forensics Syllabus

Cybersecurity principles, digital forensics, evidence acquisition, forensic analysis, and cloud/mobile forensics.

Unit 1: Cybersecurity

The foundations of cybersecurity: cyberspace architecture, the NIST cybersecurity framework, threat landscapes, the cyber kill chain, vulnerability assessment, penetration testing, ethical hacking, and cyber law.

  • Cyberspace
  • Cybersecurity
  • NIST Cybersecurity Framework
  • Cybersecurity Management Process
  • Cybersecurity Threats and Attacks
  • Cyber Kill Chain
  • Vulnerability Assessment
  • Penetration Testing
  • Ethical Hacking
  • Cyber Law: Global and Local

Unit 2: Digital Forensics

Core concepts: cybercrime attack modes, forensic categories, stakeholders, investigation types, forensics readiness, digital evidence, examination process, data representation, encoding, file structure, metadata, timestamps, hash analysis, and file systems.

  • Digital Forensic
  • Cyber Crime and Attack Modes
  • Digital Forensic Categories
  • Digital Forensic Users
  • Digital Forensic Investigation Types
  • Forensics Readiness and EDRM
  • Digital Evidence Types and Chain of Custody
  • Digital Forensics Examination Process
  • Data Representation
  • Computer Character Encoding
  • File Structure and Metadata
  • Timestamps and Hash Analysis
  • Data Storage on HDD
  • File Systems: NTFS, FAT

Unit 3: Computer Forensics Lab Requirements

Requirements for establishing a digital forensics lab: physical facilities, environment controls, hardware, furniture, evidence containers, forensic workstations, software tools, validation, lab management, and accreditation.

  • Physical Facility Requirements
  • Environment Controls
  • Hardware Equipment
  • Furniture and Consumables
  • Evidence Container
  • Forensic Workstation
  • Forensic Software
  • Validation and Verification
  • Lab Manager
  • Lab Accreditation

Unit 4: Forensic Process

The forensic investigation process: initial response, search and seizure, first responder toolkit and tasks, order of volatility, documenting the crime scene, packaging and transporting devices, and conducting interviews.

  • Initial Response
  • Search and Seizure
  • First Responder Toolkit
  • First Responder Tasks
  • Order of Volatility
  • Documenting the Crime Scene
  • Packaging and Transporting
  • Conducting Interview

Unit 5: Acquiring and Analyzing Digital Evidence

Techniques for acquiring digital evidence: forensic image formats, image validation, volatile and non-volatile memory acquisition, and analyzing forensic images.

  • Acquiring Digital Evidence
  • Forensic Image File Formats
  • Forensics Image File Validation
  • Acquiring Volatile Memory
  • Acquiring Non-Volatile Memory
  • Analyzing Hard Drive Forensic Image
  • Analyzing RAM Forensic Image

Unit 6: Forensics Analysis

Advanced forensic analysis: timeline analysis, file recovery, registry analysis, file format identification, and Windows features forensics.

  • Timeline Analysis
  • File Recovery
  • Registry Analysis
  • File Format Identification
  • Windows Features Forensics

Unit 7: Web Browser and E-mail Forensics

Forensic analysis of web browsers (Chrome, Firefox, Edge) and e-mail: examining e-mail headers, determining sender location, investigating e-mail clients, and webmail forensics.

  • Web Browser Forensics
  • E-mail Forensics
  • E-mail Header Examination
  • Determining Sender Location
  • Investigating E-mail Clients
  • Webmail Forensics

Unit 8: Mobile and Cloud Forensics

Forensic analysis of mobile devices and cloud environments: acquisition procedures, equipment, tools, legal and technical challenges.

  • Mobile Device Forensics
  • Acquisition Procedure for Mobile Devices
  • Mobile Forensic Equipment and Tools
  • Cloud Forensics
  • Legal and Technical Challenges
  • Cloud Investigation and Tools