National CAE Designated Institution
  • Online, Instructor-Led
Course Description

Prerequisite: CST 630. Gain proficiency with the tools and technologies commonly used in forensic examinations, and utilize best practices. Explore procedures for securing and validating evidence, including digital media and physical memory, as well as for recovering artifacts and analyzing, reporting, and presenting results in both criminal and civil situations. Gain experience with mobile forensic analysis. Students may receive credit for only one of the following courses: CST 640 or DFC 620.

Learning Objectives

After completing this course, you should be able to:

  • LG 1: Communication: You can communicate clearly in writing and speaking, meeting expectations for content, purpose, organization, audience, and format
  • LG 2: Critical Thinking and Analysis: You can apply logical processes to formulate clear, defensible ideas based on the analysis of facts and ethical considerations
  • LG 3:  Quantitative Reasoning:  You can use mathematical information, operations, and quantitative analyses to solve problems and inform decision-making
  • LG 4:  Leadership, Facilitation, and Collaboration: You can lead, facilitate, and collaborate with individuals and teams to achieve organizational objectives
  • LG 5:  Interpret and utilize laws, policies, procedures, and governance in digital forensic and incident response situations
  • LG 6:  Demonstrate the appropriate use of multiple digital forensic tools and technologies in a variety of criminal and security breach situations including preparing reports and presenting findings
  • LG 7:  Design and implement strategies for proper seizure, evidence handling, investigation, and analysis of digital artifacts, including preparing reports and presenting findings
  • LG 8:  Apply proper professional, legal, and ethical frameworks to govern forensic activities in local, national, and global environments
  • LG 9: Assess an information architecture for potential security threats and evidentiary value

Framework Connections

The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):

Specialty Areas

  • Network Services

Specialty Areas have been removed from the NICE Framework. With the recent release of the new NICE Framework data, updates to courses are underway. Until this course can be updated, this historical information is provided to give better context as to how it can help you with your cybersecurity goals.

Feedback

If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@hq.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.