| トピック | 出題範囲 |
|---|
| トピック 1 | - IoT Forensics: Studies forensic investigation of Internet of Things devices, embedded systems, networked sensors, smart home devices, and artifacts from IoT ecosystems.
|
| トピック 2 | - Windows Forensics: This domain includes collecting and analyzing volatile and non-volatile data, registry analysis, event logs, user artifacts (LNK, jump lists), memory forensics, and Windows application artifacts.
|
| トピック 3 | - Computer Forensic Investigation Process: Contains the phases of a forensic investigation: first response, investigation planning, evidence collection, analysis, reporting, and post-investigation actions.
|
| トピック 4 | - Network Forensics: Covers capturing and analyzing network traffic, event correlation, investigating intrusions, identifying indicators of compromise (IoCs), and wireless forensics.
|
| トピック 5 | - Defeating Anti-Forensics Techniques: Covers anti-forensic methods such as data hiding, steganography, file wiping, encryption, metadata tampering, trail obfuscation, and countermeasures.
|
| トピック 6 | - Investigating Web Attacks: Deals with the analysis of web application logs, web server artifacts (IIS, Apache), examining attack vectors on websites, and related forensic techniques.
|
| トピック 7 | - Data Acquisition and Duplication: This domain focuses on techniques for acquiring forensic images, live vs dead acquisition, order of volatility, forensic duplication, and ensuring the integrity of data.
|
| トピック 8 | - Email and Social Media Forensics: Examines email protocols, header analysis, social media data investigation, artifacts from messaging platforms, and legal aspects of digital correspondence.
|
| トピック 9 | - Malware Forensics: Covers static & dynamic malware analysis, behavior and network behavior analysis, ransomware, code analysis, and linking malware to forensic evidence.
|
| トピック 10 | - Mobile Forensics: Includes forensic acquisition and analysis of mobile devices (Android, iOS), file systems, app data, call logs, SMS, rooting
- jailbreaking, and mobile OS artifacts.
|
| トピック 11 | - Understanding Hard Disks and File Systems: Deals with disk structure, partitioning, file systems (NTFS, FAT, ext, HFS), boot process of different OS (Windows, Linux, macOS), and low-level file system behaviors.
|
| トピック 12 | - Cloud Forensics: Explores forensic methods in cloud environments (AWS, Azure, GCP), cloud storage, virtual machine artifacts, and challenges in multi-tenant environments.
|
| トピック 13 | - Computer Forensics in Today : Covers fundamentals of digital forensics, importance of forensics in incident response, cybercrimes & investigations, forensic readiness, roles of forensic investigators, and standards & best practices.
|