Vorlesung IT-Forensics

This lecture will be taught in English. The lecture will be held in a hybrid format. 

Thursdays, 10-12 h (c.t.) , in E1.3, HS 001

https://teams.microsoft.com/l/meetup-join/19%3ameeting_NGQ3YTFjYjktYTdmZS00YWE2LWEwYzgtZTc1MTZkYmUzNjhj%40thread.v2/0?context=%7b%22Tid%22%3a%2267610027-1ac3-49b6-8641-ccd83ce1b01f%22%2c%22Oid%22%3a%22ad9fb442-d4e1-4837-b38a-853f2bbc3a5b%22%7d

Tutorial: Mondays, 10-12 h, online only; starts in the second week of the semester
Instead of the 18th April the tutorial will be held on the 19th
Instead of the 6th June the tutorial will be held on the 7th

https://zoom.us/j/83714146277?pwd=dmJHQmpleVFpbzZncEJVZ2RhY1pNUT09
Meeting-ID: 837 1414 6277
Kenncode: 733614

The lecture deals with finding and evaluating legal evidence in IT systems, both for criminal prosecution and civil action.

Focus areas include, among others:

Processes of IT forensics (with a focus on incident response)

Analysis of storage media and file systems

Retrieval and analysis of RAM contents (e.g., cold boot attacks)

Attacks on passwords

(Basics of) evidence in civial actions and criminal proceedings

Role of technical experts in court

CMS

https://cms.cispa.saarland/itf22/