Surveillance et investigation numériqueArchitecture et Sécurité des systèmes (STI)

FISEFISA STI Semester 9 Option: Architecture, Administration, Audit, and Security Analysis Machine translation

Monitoring and Digital Forensics

Teaching unit Systems Architecture and Security · S09T_ A2S2 | EC Code S09O_4AS2-1

8ECTS (EU)

1Coefficient

21:20Hours

Introduction to Incident Management: Know the best practices to be put in place to manage a malicious computer incident
Know how to do a digital investigation on Windows systems (system and memory) and power a SOC/IEM

Module	Teaching unit	Semester
Windows System Administration	Network and System Administration	S6
Binary Analysis	Systems Architecture and Security	S9

Course:

TP/TD:

Analysis of the compromise of one or more Windows machines from a collection live or a copy of a disc postmortem

End part of module in QCM format with some open questions

Ref.	Verb	Description	Level
C1_1	defend	-	2
C1_2	prove	-	3
C1_4	defend	-	1

Skill	Lecture hours	Practical hours	Entry level	Exit level
Post-mortem analysis (Forensics)	10.33	9	0	2
The module allows you to acquire the skills necessary to perform a post-mortem analysis of a Windows system (system and memory) to identify malicious behaviors. It also provides a good basis for responding to the incident (reflexes, good practices, etc.).
Contribution of architectures to security	2	0	0	2
Awareness of good systems and networks administration practices to slow down attacks and better detect them.

Total21:20