DCATT304 Security

Introduction to Computer Forensics

This 5-day hands-on, instructor-led course teaches IT professionals and security professionals about methods used to perform a computer forensics investigation, also known as a high-tech investigation. Students will learn how to acquire and analyze digital evidence involving drives, email, mobile devices, and the network. Students will also learn how to report on their findings.

Prerequisites

Before attending this course students should have a working knowledge of networks and computers.

Course Modules

1. Introduction to Computer Forensics and Investigation
2. Setting up a Forensics Lab
3. Data Acquisition
4. Processing Crime and Incident Scenes
5. Working with Windows Systems and CLI Systems
6. Current Digital Forensics Tools
7. Linux and MAC File Systems
8. Recovering Graphic Files
9. Digital Forensics Analysis and Validation
10. Virtual Machine Forensics, Live Acquisitions, and Network Forensics
11. Email and Social Media Investigations
12. Overview of Mobile Device Forensics
13. Introduction to Cloud Forensics
14. Overview of Report Writing and Expert Testimony