EC-Council - CAST 612 Advanced Hacking & Forensics

Curriculum

1. Mobile Hacking and Digital Forensic Challenges

This is your introduction to the fundamental principles and methodologies used for legal forensics investigations

• History of Digital Forensics
• Global Legal System - Challenges
• Technical Aspects of Mobile Forensics
• Trace, Seize and investigate – Cyber Crime Case Scenarios
• Criminal / Civil Incidents
• Cyber Fraud
• Insider / Unknown Threats
• Recommended reading

Lab 1: Scenario Case Investigation

Lab 2: Evidence Analysis

After completing this module, you'll be familiar with:

• Creating a new case using FTK and import case evidence
• Standard Evidence storage acquisition of a hard disk
• Using FTK and Caine Live CD for case evidence analysis and evidence priority
• Exploring the difference of Physical vs. Logical Evidence Acquisition

2. Mobile Hardware Design for iPhone, BlackBerry, Android and other devices

This module will focus on the hardware design specifications of the popular mobile devices

• Forensics Methodology
• Why we need in-depth knowledge of the designs
• iDevice teardown schematics (Ipad, Iphone and Ipad)
• Android teardown schematics (HTC and Samsung)
• Blackberry Bold teardown
• Standard designs of other mobile devices
• Mobile Hardware Tool Kits

Lab: Under the hood of an iPhone

After completing this module, you'll be familiar with:

• Diving deep into the hardware aspects of mobile devices
• Appreciating the different methods, techniques and tools involved

3. Mobile Software design and the common boot process for Smart Devices

Study how mobiles boot, and use architectural design components. You'll also learn how data is stored and accessed for the IOS system

• Fundamental Open Source Software
• Why specialize?
• Mobile OSX Architecture
• Core Definitions
• UI Framework IOS
• OSX Boot Overview
• iPhone DFU – Recovery Modes
• Android Boot Process
• IOS Kernel Design
• Jail-breaking / Rooting, REALLY? why, what and how

Lab: Jail-breaking and Rooting

After completing this module, you'll be familiar with:

• Understanding Apple and Android Architecture
• Appreciating UI Frameworks and IOS Kernel Design
• Jail-breaking and rooting IOS and Android

4. Mobile Device Storage and Evidence Acquisition Techniques

This module explains how user data is stored and how to deal with deleted user evidence. It also describes the array of techniques that offer the greatest success for evidence acquisition

• Analysis Open Source Tool and SDK Software kits for Apple and Android
• Evidence Acquisition
• Smart Phone Characteristics
• Slack Space – Hidden Data
• MBR – EFI Basic Storage Designs
• Partitions and device specifics
• Passcode Protection – Encrypted Backups

Lab 1: Binary Reality

Lab 2: Accessing Evidence

After completing this module, you'll be familiar with:

• Using manual open-source evidence acquisition methods
• Bypassing passcode protection
• The importance of HEX editors
• Primary unix commands and techniques used

5. Advanced Mobile Attack Analysis

This module explains the genre and advanced Mobile Attacks

• How Mobile Devices get Hacked
• Debuggers and Decompiles
• Reverse Engineering
• IPA and APK Packages
• iPhone App Store Specifics

Lab 1: Hacking Tools and Analysis

Lab 2: Building our Environment

After completing this module, you'll be familiar with:

• Analyzing Real Threats
• Using open source tools and techniques

6. Mobile Device Hacking Techniques and Tools

This module explains how to analyze evidence and produce detailed evidence reports. It also describes how technical savvy people can obscure evidence to negate or destroy the evidence

• Hacking can kill you
• Threat Predictions 2011 / 2012
• Mobile Hacking Techniques
• IOS Platform Weaknesses
• Android Platform Weaknesses
• Blackberry Platform Weaknesses

Lab 1: Popular Software for Analysis

After completing this module, you'll be familiar with:

• Understanding Hacking Techniques and Tools.
• Launching Spear Phishing Attacks.
• Planting Hidden Payloads

7. Penetration Testing and Exploitation Vectors

This module explains the Penetration Testing training Life Cycle. It also describes the tools and techniques we can use for exploitation Vectors

• Information Gathering
• Manual Exploitation
• Exploit Frameworks
• Cracking Passwords

Lab 1: Pen Test 101

Lab 2: Pen Test Model - BlueTooth Hacking

Note: This module is designed to be 100% hands-on covering the penetration testing methodology by utilizing BackTrack v5r1

8. Mobile Forensic Hardware and Software Field Kits

This module explains Forensics Hardware Options. It also describes how we can build our portable Forensics field kits

• DIY Toolkit Options and costs
• Commercial Comparisons
• Pros and cons of open source
• Field Kit Review and best practices

Lab 1: Tag and Bag

Lab 2: Building our Forensic Station and Toolkit

After completing this module, you'll be familiar with:

• Using open source tools and techniques
• Using commercial packages
• Critical aspects related to Chain of Custody, documentation and protection of evidence techniques

9. Forensic Software, Evidence Analysis and Reporting

This module explains how to wrap-up the case by compiling the report and focuses on presenting the technical results in Laymen terms

• Disclaimer/ Legal
• Introduction to software packages
• Forensics Reports
• Best Evidence Rule
• Evidence Report Documentation

Lab 1: Creating the Report

After completing this module, you'll be familiar with:

• Categorizing Evidence
• Evidence Tampering
• The various software used