• Classroom
  • Online, Instructor-Led
  • Online, Self-Paced
Course Description

This course examines advanced technical aspects of digital computer evidence to include detection, collection, identification, and preservation. Emphasis is placed on specific tools and methods for extracting deleted or destroyed computer-related evidence.

Learning Objectives

Summarize the basic principles of computer forensics.
Summarize important laws regarding computer forensics.
Describe various computer crimes and how they are investigated.
Describe digital forensic methodologies and evidence handling techniques.
Outline the proper approach to collecting, seizing, and protecting evidence.
Explain techniques for hiding and scrambling information as well as how data is recovered.
Summarize various types of digital forensics.
Describe contingency planning and incident response.
Explain how to perform network packet analysis.
Identify technical and legal trends in digital forensics.

Framework Connections

The materials within this course focus on the Knowledge Skills and Abilities (KSAs) identified within the Specialty Areas listed below. Click to view Specialty Area details within the interactive National Cybersecurity Workforce Framework.