Introduction to Digital Forensics
Introduction to Digital Forensics

-
Online, Instructor-Led
Course Description
This is a hands-on course where you will learn the theory and practice of digital forensics. You will learn about general forensic procedures, evidence handling, how to create a forensic copy and verify it, how to perform a logical and physical analysis of media, how to recover deleted files, and learn about laws applying to digital forensics.
Learning Objectives
- Demonstrate and understanding of computer forensics and investigation as a profession
- Demonstrate an understanding of computing investigations
- Demonstrate an understanding of the processing crime and incident scenes
- Create a forensic copy of a piece of digital media
- Verify a forensic copy using multiple one-way cryptographic hashes
- Identify structures of the FAT file system
- Recover deleted files manually
- Discuss laws related to computer evidence
- Create professional quality forensic reports
- Discuss ethics in digital forensics
Framework Connections
The materials within this course focus on the Knowledge Skills and Abilities (KSAs) identified within the Specialty Areas listed below. Click to view Specialty Area details within the interactive National Cybersecurity Workforce Framework.
Feedback
If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.