• Classroom
  • Online, Instructor-Led
Course Description
  • Forensics tools, methods and procedures for investigating computers.
  • Data recovery techniques and evidence collection, protection of evidence, expert witness skills and computer crime investigation techniques.
  • Analysis of various file systems and specialized diagnostic software to retrieve data.
  • Prepares in part for CompTIA Security+ and maps to Computer Investigation Specialists exam.

Learning Objectives

  1. Define and describe computer forensics investigations.
  2. Compare and contrast the various operating systems and file systems.
  3. Evaluate and choose appropriate software, hardware, and tools to equip a Forensics Lab.
  4. Retrieve and analyze data from a suspect's computer.
  5. Create investigative reports and act as an expert witness.

Framework Connections

The materials within this course focus on the Knowledge Skills and Abilities (KSAs) identified within the Specialty Areas listed below. Click to view Specialty Area details within the interactive National Cybersecurity Workforce Framework.