• Classroom
  • Online, Instructor-Led
Course Description
  • Forensics tools, methods and procedures for investigating computers.
  • Data recovery techniques and evidence collection, protection of evidence, expert witness skills and computer crime investigation techniques.
  • Analysis of various file systems and specialized diagnostic software to retrieve data.
  • Prepares in part for CompTIA Security+ and maps to Computer Investigation Specialists exam.

Learning Objectives

  1. Define and describe computer forensics investigations.
  2. Compare and contrast the various operating systems and file systems.
  3. Evaluate and choose appropriate software, hardware, and tools to equip a Forensics Lab.
  4. Retrieve and analyze data from a suspect's computer.
  5. Create investigative reports and act as an expert witness.

Framework Connections

The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):

Specialty Areas

  • Digital Forensics
  • Incident Response
  • Cyber Investigation