Examine the importance of being able to identify, handle, and process digital forensic evidence. Learn about computer forensics, chain of custody, and order of volatility, as well as various evidence types.
Learning Objectives
SECOPS: Identifying Forensic Evidence
- recognize how to identify, handle, and process digital forensic evidence
- compare and contrast best, corroborative, and indirect evidence, and describe image types and attribution
Framework Connections
The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):
Specialty Areas
- Cyber Operational Planning
- Cyber Operations
- Cybersecurity Management
- Digital Forensics
- Executive Cyber Leadership
- Network Services
Feedback
If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.