Digital Forensics & Investigations

About Course

This course is designed to provide participants with deep insights into the principles, processes, and tools used in cybercrime investigations and digital forensics. It emphasizes practical labs on recovering and analyzing digital evidence from systems, networks, and memory. Participants will also understand legal and ethical considerations surrounding digital forensics.

25 modules and 15 lab projects

Understand the digital forensic process and investigation lifecycle
Identify types of digital evidence and crime scenarios
Maintain forensic readiness and proper evidence handling
Apply legal principles such as chain of custody and court admissibility
Set up and operate a forensic lab environment
Analyze file systems and recover deleted or hidden data
Perform disk imaging, file carving, and metadata analysis
Conduct live forensics and memory analysis using Volatility
Examine malicious processes and perform timeline correlation
Analyze packet captures, logs, DNS, and network-based artifacts
Investigate mobile devices, cloud platforms, and dark web activities
Extract iOS and Android data using forensic tools
Understand cryptocurrency and digital transaction tracing
Write forensic reports and testify as an expert witness in court

Course Content

Part 1: Foundations of Digital Forensics

Module 1: Introduction to Digital Forensics & Investigation Processes
Module 2: Categories of Digital Evidence and Crime Scenarios
Module 3: Forensic Readiness and Evidence Handling Procedures
Module 4: Legal Framework, Chain of Custody, and Court Admissibility
Module 5: Setting Up a Forensic Lab Environment

Part 2: Disk & File System Forensics

Part 3: Memory and Live Forensics

Part 4: Network and Log Forensics

Part 5: Mobile, Cloud & Emerging Domains

Student Ratings & Reviews

No Review Yet

Digital Forensics & Investigations

About Course

What Will You Learn?

Course Content

Part 1: Foundations of Digital Forensics

Module 1: Introduction to Digital Forensics & Investigation Processes

Module 2: Categories of Digital Evidence and Crime Scenarios

Module 3: Forensic Readiness and Evidence Handling Procedures

Module 4: Legal Framework, Chain of Custody, and Court Admissibility

Module 5: Setting Up a Forensic Lab Environment

Part 2: Disk & File System Forensics

Module 1: Understanding Disk Structures and File Systems (FAT, NTFS, EXT)

Module 2: Data Acquisition: Imaging Techniques (DD, FTK Imager)

Module 3: File Carving, Metadata Analysis, and Slack Space

Module 4: Recovering Deleted Files and Hidden Partitions

Module 5: Hands-on Labs with Autopsy and FTK

Part 3: Memory and Live Forensics

Module 1: Capturing Volatile Data and RAM Analysis

Module 2: Memory Forensics with Volatility Framework

Module 3: Identifying Malicious Processes and DLL Injection

Module 4: Live Forensics Tools and Considerations

Module 5: Timeline and Correlation Analysis

Part 4: Network and Log Forensics

Module 1: Fundamentals of Network Forensics

Module 2: Packet Capture & Analysis using Wireshark and Tshark

Module 3: DNS, HTTP, Email & Protocol-Based Analysis

Module 4: Firewall, Proxy, and Syslog Forensics

Module 5: Intrusion and Breach Investigation Lab

Part 5: Mobile, Cloud & Emerging Domains

Module 1: Introduction to Mobile Device Forensics

Module 2: Android and iOS Evidence Extraction

Module 3: Cloud Forensics Challenges and Methodologies

Module 4: Dark Web and Cryptocurrency Investigation Techniques

Module 5: Report Writing, Expert Witness Role & Courtroom Presentation