• Classroom
Course Description

This course will develop basic computer forensics skills necessary to uncover digital evidence in an organized and reportable manner. The course will provide a comparative study of information technology, evidence analysis, chain of custody, and data retrieval. Students will have hands-on laboratory experience using computer forensic tools, evidence preservation techniques and documentation. Course is offered in the fall semester.

Learning Objectives

  • Apply a layout and navigate cases step-by-step using forensics software
  • Analyze hidden and deleted data on digital media
  • Analyze data and refine the results
  • Report and present investigation findings

Framework Connections

The materials within this course focus on the Knowledge Skills and Abilities (KSAs) identified within the Specialty Areas listed below. Click to view Specialty Area details within the interactive National Cybersecurity Workforce Framework.

Feedback

If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.