This is a hands-on course where you will learn the theory and practice of digital forensics. You will learn about general forensic procedures, evidence handling, how to create a forensic copy and verify it, how to perform a logical and physical analysis of media, how to recover deleted files, and learn about laws applying to digital forensics.
Learning Objectives
- Demonstrate and understanding of computer forensics and investigation as a profession
- Demonstrate an understanding of computing investigations
- Demonstrate an understanding of the processing crime and incident scenes
- Create a forensic copy of a piece of digital media
- Verify a forensic copy using multiple one-way cryptographic hashes
- Identify structures of the FAT file system
- Recover deleted files manually
- Discuss laws related to computer evidence
- Create professional quality forensic reports
- Discuss ethics in digital forensics
Framework Connections
The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):
Specialty Areas
- Digital Forensics
Feedback
If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@mail.cisa.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.