But du cours
Apply reverse engineering and forensic techniques to reconstruct the timeline of an attack in the context of a digital forensics investigation.
Acquis d'apprentissage visés
- Define and implement a security organization and policy tailored to identified risks (1.5)-(3.4)
- Design, develop, and implement mechanisms to protect data, software, networks, and cloud systems (1.5)-(3.4)
- Define and conduct a risk analysis based on documentation, offensive cybersecurity campaigns, and regulatory frameworks (1.5)-(3.4)
Prérequis
Cybersecurity, systems and networks, and programming modules from previous semesters.
Programme
- Apply a forensic investigation technique in a digital forensics scenario.
- Compare commercial and open-source forensic tools.
- Reconstruct a timeline using information extracted from a device under analysis.
- Use forensic tools specific to major mobile operating systems.
- Detect and analyze encrypted content.
- Use a binary analysis tool and/or a disassembler to analyze malware (reverse engineering).
- Laboratory procedures for handling malware.
Modalités d'évaluation
A knowledge assessment and a lab report.
Supports
Slides and practical work sheets.