Difference between revisions of "Fall 2026: Cyber Forensics"

From MKWiki
Jump to navigation Jump to search
 
(18 intermediate revisions by the same user not shown)
Line 1: Line 1:
−
CF 2026
+
== Logistics ==
 +
*Class Timings: '''Wednesdays''' 10:30 am - 11:30 am,  '''Fridays''' 10:30 am - 12:30 pm
 +
*Classroom: Wednesdays (''R40'')  and Fridays (''R-44'')
 +
*Lab Timings: '''Wednesdays''' 8:30 am - 10:30 am
 +
*Labs: Computer Lab 4 (''CL-4'')
 +
 
 +
== Course Overview ==
 +
* As per the Delhi University Course [https://cs.du.ac.in/uploads/syllabus/NEP/pdfs2022/DSE/Cyber_Forensics.pdf Syllabus/Guidelines]
 +
 
 +
== Lectures ==
 +
{| class="wikitable" style="text-align: left; width: 100%";
 +
|-
 +
!Lecture
 +
!Topic
 +
!Lecture Slides
 +
!Readings
 +
|-
 +
| style="width: 12%; " |  Unit-1
 +
| style="width: 60%" |  '''''Digital Forensics:''''':
 +
| style="width: 15%" | [unit1.pdf] 
 +
| Chapter 1 (CB1)
 +
|-
 +
| Unit 2
 +
|  '''''Windows OS Forensics:'''''
 +
|  [unit2.pdf] 
 +
| Chapter 2 (CB1)
 +
|-
 +
| Unit 3
 +
|  '''''Evidence Recovery:'''''
 +
|  [unit3.pdf] 
 +
| Chapter 6 (CB1)
 +
|-
 +
| Unit 4
 +
|  '''''Investigation:'''''
 +
|  [unit4.pdf]   
 +
| Chapter 4 (CB1)
 +
|-
 +
| Unit 5
 +
|  '''''Cyber Crimes and Cyber Laws:'''''
 +
| [unit5.pdf] 
 +
| Chapter 5 (CB1)
 +
|}
 +
 
 +
== Assignments and Tests==
 +
===Class Assignments===
 +
* '''''Assignment No. 1''''',
 +
* '''''Assignment No. 2''''',
 +
 
 +
===Tests and Quizzes===
 +
* '''Test 1''' :
 +
* '''Test 2''' :
 +
 
 +
==Labs==
 +
 
 +
'''Instructions'''
 +
* Please be on time to avoid the '''Attendance Penalty'''.
 +
* Please put your mobile phone on '''Silent Mode'''.
 +
* Each lab assignment needs to be submitted in the '''Google Classroom''' for evaluation(will be notified in the GC lab-wise, submit before the deadline).
 +
* Turn off'''(shut down) your assigned computer and arrange the chair''' before you leave the lab.
 +
 
 +
 
 +
=== Lab 1 & 2: ( week of 27<sup>th</sup> July,  03<sup>rd</sup> & 10<sup>th</sup> August 2026 ) ===
 +
{| class="wikitable" style="text-align: justify;
 +
|-
 +
! Task. No. 
 +
! Task
 +
! Assessment Period
 +
! Submission Deadline
 +
|-
 +
| style="width: 8%"  | 1 & 2
 +
| style="width: 60%" | Study of Network related Commands (Windows/Linux)
 +
* '''Network Discovery:''' - Ping, Traceroute/Tracert/Tracepath, Nmap, MTR/Pathping
 +
* '''Traffic Analysis:''' - Tcpdump/ptkmon/resmon(GUI Tool), Iftop/Bmon, Iperf
 +
* '''DNS/Domain Forensics:''' - Dig, Nslookup, Whois, Host
 +
* '''Host configuration:'''- Ifconfig/ip, SS/Netstat, Ethtool, Hostname
 +
* '''Address/Routing Analysis:''' - ARP/arp -a, Route/ route print, Iproute2
 +
* '''Data Transfer/File Retrieval:''' - wget, curl/curl.exe
 +
| style="width: 15%" |  29/07/2026 - 26/08/2026
 +
|  '''28/08/2026'''
 +
|}
 +
 
 +
 
 +
=== Lab 3: ( week of 31<sup>st</sup> August 2026 ) ===
 +
{| class="wikitable" style="text-align: justify;
 +
|-
 +
! Task. No. 
 +
! Task
 +
! Assessment Period
 +
! Submission Deadline
 +
|-
 +
| style="width: 8%"  | 3
 +
| style="width: 60%" | Analysis of Windows registry
 +
| style="width: 15%" |  02/09/2026 - 09/09/2026
 +
|  '''10/09/2026'''
 +
|}
 +
 
 +
 
 +
=== Lab 4: ( week of 07<sup>th</sup> September 2026 ) ===
 +
{| class="wikitable" style="text-align: justify;
 +
|-
 +
! Task. No. 
 +
! Task
 +
! Assessment Period
 +
! Submission Deadline
 +
|-
 +
| style="width: 8%"  | 4
 +
| style="width: 60%" | Capture and analyse network packets using Wireshark. Analyse the packets captured.
 +
| style="width: 15%" |  09/09/2026 - 16/09/2026
 +
|  '''17/09/2026'''
 +
|}
 +
 
 +
== Resources ==
 +
'''References:'''
 +
* '''R1''':  Dejey, S. Murugan, Cyber Forensics, Oxford University Press, 2018.
 +
* '''R2''':  C. Altheide & H. Carvey, Digital Forensics with Open Source Tools, Syngress, 2011. ISBN: 9781597495868.
 +
* '''R3''':  Niranjan Reddy, Practical Cyber Forensics. An Incident-Based Approach to Forensic Investigations, Apress, 2019 (Available on DU eLibrary).
 +
* '''R4''':  Marjee T. Britz, Computer Forensics and Cyber Crime: An Introduction, Pearson Education, 2013.
 +
* '''R5''':  https://www.indiacode.nic.in/handle/123456789/1999?sam_handle=123456789/1362
 +
 
 +
'''Additional References:'''
 +
#  “Computer Forensics: Investigating Network Intrusions and Cybercrime” by Cameron H.
 +
#  Malin, Eoghan Casey, and James M. Aquilina Online Course Management System: https://esu.desire2learn.com/
 +
#  Computer Forensics, Computer Crime Investigation by John R., Vacca, Firewall Media, New Delhi.
 +
# Computer Forensics and Investigations by Nelson, Phillips, Enfinger, Steuart, CENGAGE Learning

Latest revision as of 23:05, 7 September 2026

Logistics

  • Class Timings: Wednesdays 10:30 am - 11:30 am, Fridays 10:30 am - 12:30 pm
  • Classroom: Wednesdays (R40) and Fridays (R-44)
  • Lab Timings: Wednesdays 8:30 am - 10:30 am
  • Labs: Computer Lab 4 (CL-4)

Course Overview

Lectures

Lecture Topic Lecture Slides Readings
Unit-1 Digital Forensics:: [unit1.pdf] Chapter 1 (CB1)
Unit 2 Windows OS Forensics: [unit2.pdf] Chapter 2 (CB1)
Unit 3 Evidence Recovery: [unit3.pdf] Chapter 6 (CB1)
Unit 4 Investigation: [unit4.pdf] Chapter 4 (CB1)
Unit 5 Cyber Crimes and Cyber Laws: [unit5.pdf] Chapter 5 (CB1)

Assignments and Tests

Class Assignments

  • Assignment No. 1,
  • Assignment No. 2,

Tests and Quizzes

  • Test 1 :
  • Test 2 :

Labs

Instructions

  • Please be on time to avoid the Attendance Penalty.
  • Please put your mobile phone on Silent Mode.
  • Each lab assignment needs to be submitted in the Google Classroom for evaluation(will be notified in the GC lab-wise, submit before the deadline).
  • Turn off(shut down) your assigned computer and arrange the chair before you leave the lab.


Lab 1 & 2: ( week of 27th July, 03rd & 10th August 2026 )

Task. No. Task Assessment Period Submission Deadline
1 & 2 Study of Network related Commands (Windows/Linux)
  • Network Discovery: - Ping, Traceroute/Tracert/Tracepath, Nmap, MTR/Pathping
  • Traffic Analysis: - Tcpdump/ptkmon/resmon(GUI Tool), Iftop/Bmon, Iperf
  • DNS/Domain Forensics: - Dig, Nslookup, Whois, Host
  • Host configuration:- Ifconfig/ip, SS/Netstat, Ethtool, Hostname
  • Address/Routing Analysis: - ARP/arp -a, Route/ route print, Iproute2
  • Data Transfer/File Retrieval: - wget, curl/curl.exe
 29/07/2026 - 26/08/2026 28/08/2026


Lab 3: ( week of 31st August 2026 )

Task. No. Task Assessment Period Submission Deadline
3 Analysis of Windows registry 02/09/2026 - 09/09/2026 10/09/2026


Lab 4: ( week of 07th September 2026 )

Task. No. Task Assessment Period Submission Deadline
4 Capture and analyse network packets using Wireshark. Analyse the packets captured. 09/09/2026 - 16/09/2026 17/09/2026

Resources

References:

  • R1: Dejey, S. Murugan, Cyber Forensics, Oxford University Press, 2018.
  • R2: C. Altheide & H. Carvey, Digital Forensics with Open Source Tools, Syngress, 2011. ISBN: 9781597495868.
  • R3: Niranjan Reddy, Practical Cyber Forensics. An Incident-Based Approach to Forensic Investigations, Apress, 2019 (Available on DU eLibrary).
  • R4: Marjee T. Britz, Computer Forensics and Cyber Crime: An Introduction, Pearson Education, 2013.
  • R5: https://www.indiacode.nic.in/handle/123456789/1999?sam_handle=123456789/1362

Additional References:

  1. “Computer Forensics: Investigating Network Intrusions and Cybercrime” by Cameron H.
  2. Malin, Eoghan Casey, and James M. Aquilina Online Course Management System: https://esu.desire2learn.com/
  3. Computer Forensics, Computer Crime Investigation by John R., Vacca, Firewall Media, New Delhi.
  4. Computer Forensics and Investigations by Nelson, Phillips, Enfinger, Steuart, CENGAGE Learning
Retrieved from "http://www.mkbhandari.com/mkwiki/index.php?title=Fall_2026:_Cyber_Forensics&oldid=2716"