| トピック | 出題範囲 |
|---|
| トピック 1 | - Linux and Mac Forensics: This domain addresses forensic methodologies for Linux and macOS systems including data collection, memory forensics, log analysis, APFS examination, and platform-specific investigation tools.
|
| トピック 2 | - Email and Social Media Forensics: This domain addresses email crime investigation including message analysis, U.S. email laws, social media activity tracking, footage extraction, and social network graph analysis.
|
| トピック 3 | - Windows Forensics: This domain covers Windows-specific investigation techniques including volatile and non-volatile data collection, memory and registry analysis, web browser forensics, metadata examination, and analysis of Windows artifacts like ShellBags, LNK files, and event logs.
|
| トピック 4 | - Dark Web Forensics: This domain addresses dark web investigation focusing on Tor browser artifact identification, memory dump analysis, and extracting evidence of dark web activities.
|
| トピック 5 | - Data Acquisition and Duplication: This domain addresses live and dead acquisition techniques, eDiscovery methodologies, data acquisition formats, validation procedures, write protection, and forensic image preparation for examination.
|
| トピック 6 | - Cloud Forensics: This domain covers cloud platform forensics (AWS, Azure, Google Cloud) including data storage, logging, forensic acquisition of virtual machines, and investigation of cloud security incidents.
|
| トピック 7 | - Investigating Web Attacks: This domain covers web application forensics including IIS and Apache log analysis, OWASP Top 10 risks, and investigation of attacks like XSS, SQL injection, path traversal, command injection, and brute-force attempts.
|
| トピック 8 | - Network Forensics: This domain covers network incident investigation through traffic and log analysis, event correlation, indicators of compromise identification, SIEM usage, and wireless network attack detection and examination.
|
| トピック 9 | - Computer Forensics Investigation Process: This domain addresses the structured investigation phases including first response procedures, lab setup, evidence preservation, data acquisition, case analysis, documentation, reporting, and expert witness testimony.
|
| トピック 10 | - IoT Forensics: This domain addresses IoT device investigation including architecture, OWASP IoT threats, forensic processes, wearable and smart device analysis, hardware-level techniques (JTAG, chip-off), and drone data extraction.
|
| トピック 11 | - Malware Forensics: This domain addresses malware investigation including controlled lab setup, static analysis, system and network behavior analysis, suspicious document examination, and ransomware investigation techniques.
|