NITA-U holds Cyber Security Training in Digital Forensics and Incident Response

Monday, May 11, 2015

The National Information Technology Authority – Uganda (NITA-U) together with the Egyptian Computer Emergency Response Team (EG-CERT) held a four day Cyber Security training in the area of Digital Forensics and Incident Response at the Information Access Centre located at the Ministry of Information and Communications Technology on 4th and 7th May 2015.

 

The trainees were Government Information Technology personnel with knowledge and experience in information security from various Ministries, Departments and Agencies.

 

The training covered areas of computer forensics analysis and incident response through learning about forensics principles, evidence continuity and methodology to employ when conducting a forensic investigation as well as phases of handling response for any incident.

It also included numerous topics evolving around Incident handling such as Misuses of Computer & Networks, Incident Handling Phases or steps to follow when an incident occurs; Preparation, Identification, Containment, Eradication, Recovery and Lesson Learnt.

 

The practical session based on Computer Digital Forensics involved topics and exercises such as Large Scale Phishing Attacks – how to detect them and respond, 

General recommendations shared in case of an attack are; Check Intrusion Prevention Systems (IPS) logs, Check Operating Systems (OS) logs, Use new server with fresh antivirus software, Check webserver logs.

 

 

The Training was conducted by Egyptian CERT Experts Eng. Ahmed Tharwat Al-sayed and Eng.Ahmed Abd Allah Mashaly from the National Telecommunication Regulatory Authority (NTRA) 

 

Speaking at the opening of the training Executive Director, NITA-U, Mr James Saaka “We shall continue to hold similar trainings to equip relevant Government officials with appropriate skills to promote cyber security in Uganda.”