National CAE Designated Institution
  • Online, Instructor-Led
Course Description

This is a hands-on course where you will learn the theory and practice of digital forensics. You will learn about general forensic procedures, evidence handling, how to create a forensic copy and verify it, how to perform a logical and physical analysis of media, how to recover deleted files, and learn about laws applying to digital forensics.

Learning Objectives

  • Demonstrate and understanding of  computer forensics and investigation as a profession
  • Demonstrate an understanding of computing investigations
  • Demonstrate an understanding of  the processing crime and incident scenes
  • Create a forensic copy of a piece of digital media
  • Verify a forensic copy using multiple one-way cryptographic hashes
  • Identify structures of the FAT file system
  • Recover deleted files manually
  • Discuss laws related to computer evidence
  • Create professional quality forensic reports
  • Discuss ethics in digital forensics

Framework Connections

The materials within this course focus on the Knowledge Skills and Abilities (KSAs) identified within the Specialty Areas listed below. Click to view Specialty Area details within the interactive National Cybersecurity Workforce Framework.

Feedback

If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.