Testbed para el aprendizaje de informática forense

Abstract

The research addresses the cybersecurity talent gap in Latin America and in the field of computer forensics, problems and challenges are identified as the shortage of resources and training, this research expresses the need for a strengthening of the National Cybersecurity Strategy of Ecuador through investment and education. As a main objective to implement a test environment for learning computer forensics. The methodological approach will combine a local environment and a cloud of resources to maximize analysis capabilities and preserve the integrity of evidence, thus providing a comprehensive system for computer forensics education. In this paper, the steps of the practical forensic analysis process performed in the research, from the configuration of controlled attack scenarios on local virtual machines to advanced analysis in the cloud through AWS services, have been presented as results. Through practical guides, the key-steps were explained, including evidence collection, subsequent transfer ensuring integrity through hash values and its processing on EC2 instances. As simulation and experimentation using cloud platforms was developed, tools and technologies deployable in both cloud and on-premises environments were integrated, creating practical guidelines to address the acquisition of digital forensics skills for both academic and professional audiences.