| トピック | 出題範囲 |
|---|
| トピック 1 | - Investigating Web Attacks: This domain covers web application forensics including IIS and Apache log analysis, OWASP Top 10 risks, and investigation of attacks like XSS, SQL injection, path traversal, command injection, and brute-force attempts.
|
| トピック 2 | - Defeating Anti-Forensics Techniques: This domain teaches methods to overcome evidence hiding techniques including data recovery, file carving, partition recovery, password cracking, steganography detection, encryption handling, and program unpacking.
|
| トピック 3 | - Linux and Mac Forensics: This domain addresses forensic methodologies for Linux and macOS systems including data collection, memory forensics, log analysis, APFS examination, and platform-specific investigation tools.
|
| トピック 4 | - Network Forensics: This domain covers network incident investigation through traffic and log analysis, event correlation, indicators of compromise identification, SIEM usage, and wireless network attack detection and examination.
|
| トピック 5 | - Data Acquisition and Duplication: This domain addresses live and dead acquisition techniques, eDiscovery methodologies, data acquisition formats, validation procedures, write protection, and forensic image preparation for examination.
|
| トピック 6 | - Dark Web Forensics: This domain addresses dark web investigation focusing on Tor browser artifact identification, memory dump analysis, and extracting evidence of dark web activities.
|
| トピック 7 | - Cloud Forensics: This domain covers cloud platform forensics (AWS, Azure, Google Cloud) including data storage, logging, forensic acquisition of virtual machines, and investigation of cloud security incidents.
|
| トピック 8 | - Windows Forensics: This domain covers Windows-specific investigation techniques including volatile and non-volatile data collection, memory and registry analysis, web browser forensics, metadata examination, and analysis of Windows artifacts like ShellBags, LNK files, and event logs.
|
| トピック 9 | - Mobile Forensics: This domain covers Android and iOS forensics including device architecture, forensics processes, cellular data investigation, file system acquisition, lock bypassing, rooting
- jailbreaking, and mobile application analysis.
|
| トピック 10 | - Computer Forensics in Today's World: This domain covers fundamentals of computer forensics including cybercrime types, investigation procedures, digital evidence handling, forensic readiness, investigator roles and responsibilities, industry standards, and legal compliance requirements.
|
| トピック 11 | - Email and Social Media Forensics: This domain addresses email crime investigation including message analysis, U.S. email laws, social media activity tracking, footage extraction, and social network graph analysis.
|
| トピック 12 | - Computer Forensics Investigation Process: This domain addresses the structured investigation phases including first response procedures, lab setup, evidence preservation, data acquisition, case analysis, documentation, reporting, and expert witness testimony.
|
| トピック 13 | - Understanding Hard Disks and File Systems: This domain covers storage media characteristics, disk logical structures, operating system boot processes (Windows, Linux, macOS), file systems analysis, encoding standards, and examination of common file formats.
|