• Classroom
Course Description

Course covers forensic investigation, case prioritization, and case management, and addresses procedural documentation, standards of evidence, reporting, and disclosure requirements. The digital forensic portion of the course provides an understanding as to disk imaging, file recovery, trace-back techniques, network analytics, evaluation of metadata, malware, and anti-forensics. Additionally, the course covers the out-sourcing of the investigative function, or part thereof, to third parties, and provides specific case studies, including a practical laboratory project.

Learning Objectives


Framework Connections

The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):

Specialty Areas

  • Digital Forensics


If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.