This is a hands-on course where you will learn the theory and practice of digital forensics. You will learn about general forensic procedures, evidence handling, how to create a forensic copy and verify it, how to perform a logical and physical analysis of media, how to recover deleted files, and learn about laws applying to digital forensics.
Demonstrate and understanding of computer forensics and investigation as a profession
Demonstrate an understanding of computing investigations
Demonstrate an understanding of the processing crime and incident scenes
Create a forensic copy of a piece of digital media
Verify a forensic copy using multiple one-way cryptographic hashes
Identify structures of the FAT file system
Recover deleted files manually
Discuss laws related to computer evidence
Create professional quality forensic reports
Discuss ethics in digital forensics
The materials within this course focus on the Knowledge Skills and Abilities (KSAs) identified within the Specialty Areas listed below. Click to view Specialty Area details within the interactive National Cybersecurity Workforce Framework.