Course Description
- Forensics tools, methods and procedures for investigating computers.
- Data recovery techniques and evidence collection, protection of evidence, expert witness skills and computer crime investigation techniques.
- Analysis of various file systems and specialized diagnostic software to retrieve data.
- Prepares in part for CompTIA Security+ and maps to Computer Investigation Specialists exam.
Learning Objectives
- Define and describe computer forensics investigations.
- Compare and contrast the various operating systems and file systems.
- Evaluate and choose appropriate software, hardware, and tools to equip a Forensics Lab.
- Retrieve and analyze data from a suspect's computer.
- Create investigative reports and act as an expert witness.
Framework Connections
The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):
Competency Areas
Feedback
If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@mail.cisa.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.