Hello everyone,
I'm a final year Uni student, and part of my course requires me to teach 2nd year Forensic Students for an hour on a forensic topic that's not part of the curriculum.
It needs to be around 15mins talking, 45mins lab.
Does anyone have any ideas for topics?
What are three things you did not get taught early enough in your program that you wish someone would have taught you?
Pick one of those and teach it.
Did your miss out on being taught how to image an evidence item in Linux? Did you not get shown some function in Plaso? Did you wish you were taught something about the Registry? How about regular expressions?
Really your challenge is not so hard that you should have to ask here for suggestions.
What about time frame? Try to show how to find what the user did with the computer in a time frame, provide any image and let them follow the procedure.