PART 1. Introduction to Digital Forensics
1. Understanding Digital Forensics
2. Investigative Process Methodology
3. Digital Evidence Management
4. Code of Ethics and Standards
5. Digital Forensic as a Business PART 2. Digital Forensic Readiness 6. Understanding Forensic Readiness 7. Define Business Risk Scenarios 8. Identify Potential Data Sources 9. Determine Collection Requirements 10. Establish Legal Admissibility 11. Establish Secure Handling and Storage 12. Enable Targeted Monitoring 13. Map Investigative Workflows 14. Maintain Evidence-Based Presentation 15. Ensure Legal Review 16. Achieving Forensic Readiness PART 3. Addenda A. Tool and Equipment Validation B. Service Catalogs C. Cost-Benefit Analysis D. Taxonomy E. Risk Assessments F. Threat Modelling G. Data Warehousing H. Requirements Analysis PART 4. Appendixes A. Investigative Process Models B. Education and Professional Certifications C. Investigative Workflows
Jason Sachowski has over twelve years of experience in digital forensic investigations, secure software development, and information security architecture. He currently manages a team of forensic investigators and data breach analysts for The Bank of Nova Scotia, commonly known as Scotiabank, Canada's third largest and most international bank. Throughout his career, Jason has performed hundreds of digital forensic investigations involving Enterprise servers, network logs, smart phones, and database systems. Complimentary to his technical experiences, he has also developed and maintained processes and procedures, managed large information security budgets, and governed the negotiation of third-party contracts. In addition to his professional career, Jason is the author of book `Implementing Digital Forensic Readiness: From Reactive to Proactive Process'. He also serves as a contributing author and content moderator for DarkReading, is a subject matter expert for (ISC)2 professional exam development, and volunteers as an advocate for CyberBullying prevention and CyberSecurity awareness. He holds several Information Security and Digital Forensic certifications including: Certified Information Systems Security Professional - Information Systems Security Architecture Professional (CISSP-ISSAP), Certified Cyber Forensics Professional (CCFP), Certified Secure Software Lifecycle Professional (CSSLP), Systems Security Certified Practitioner (SSCP), and EnCase Certified Examiner (EnCE).