eSecurity Institute

The cyber domain as it is referred to in the reading materials, is essentially a combination of space, various threat actors and competing agendas. The cyber domain is like any other war fighting domain such as sea, air or land. Each of these domains includes a variety of assets, liabilities,

Introduction This report covers five digital forensics software tools that vary in user difficulty from the beginner to intermediate level. These five tools cover various aspects of digital forensics to include memory analysis, mobile forensics, network forensics, decryption and various other aspects and functions. The five tools listed in this

U.S. Legal defines an act of war with the following description. “An act of war is an action by one country against another with an intention to provoke a war or an action that occurs during a declared war or armed conflict between military forces of any origin. The

The U.S. government began to take cybersecurity more seriously over the last two decades as numerous cyber attacks and incidents have occurred highlighting the vulnerabilities that were present. As decision makers have slowly learned about the threats to national security that cyber attacks present they have updated their viewpoints

The subscriber identity module (SIM) card is a small physical and now electronic component of a cell phone that allows the phone to communicate over its respective cellular carrier’s network. This allows the phone to make and receive calls and to use the cellular network for a variety of

Ghiro is a free tool used for image forensics. The tool allows the user to easily extract and analyze EXIF, IPTC, XMP and other forms of metadata. Ghiro also extracts GPS location data found in multimedia files. Ghiro additionally extracts thumbnail images associated with files. Download Ghiro

Chain of custody is the trail of documentation that links each piece of evidence to an aspect of a law enforcement investigation. Chain of custody is a very important concept regarding digital forensics especially in law enforcement investigations. Disruptions in the chain of custody can result in evidence being inadmissible

As technology becomes more prevalent in society the introduction of electronic data and information as evidence has become more commonplace. Electronic evidence is not only useful in crimes that involve computer related offenses such as hacking but are also useful in regular crimes. Data extracted from electronic devices, computer networks

In a business setting digital forensics is used for a variety of purposes. Some applications of digital forensics for business include incident response, IT audits, IT compliance management, digital recovery & restoration, vulnerability testing and developing cybersecurity plans, policies and infrastructure. Incident Response is an activity that refers to the discovery,

Digital evidence is information stored or transmitted in binary form or other formats that may be relied on in court. It can be found on a computer hard drive, a mobile phone, tablet or other piece of computer hardware. Digital evidence is commonly associated with electronic crime also known as

As the world becomes more interconnected through the widespread adoption of technology such as IoT, wearable tech and multifunction networked devices so will the corresponding vulnerabilities and security concerns. As nations, businesses and individuals increasingly depend upon technological infrastructure to conduct daily operations the risk associated with denial of service,

Modern Network Forensics Network devices are constantly storing, sending and receiving data packets. The two methods used to conduct network forensics are through analyzing packet captures which are data packets sent between devices or through analyzing log data which is stored on a device such as a router. These two

Deterring cyber attacks should be an element of any organization’s cybersecurity strategy. Within the field of information security there are many types of security controls. The most common types of controls are physical controls, technical controls or logical controls, managerial controls and operational controls. Each of these security controls

Developing a toolkit for digital forensics on computer and mobile devices can be designed in various ways depending on the operating environment you plan on working in. For example in a military environment it may be necessary to quickly extract digital forensics data. The investigator may also need to carry

As societies, governments and militaries around the world become increasingly dependent on computer based technologies the importance of cyber related capabilities will dramatically rise. The applications of cyber techniques in intelligence, command and control, infrastructure and general warfare become more pronounced as various weapon systems, strategies and necessary services operate

XRY is a mobile forensics tool that allows investigators to extract a wide variety of data from mobile devices. XRY software requires a PC using a Windows operating system. XRY software works on smartphones such as iPhones and Galaxy devices and other mobile devices such as tablets, GPS devices and

DB Browser for SQLite is an open source software which is used to create and edit database files that use SQLite. The tool is similar to a spreadsheet in its design and allows for the user to quickly and easily create and modify database files. Developer Website