Get in Touch
 Duration 35 hours

Course Outline

Computer forensics facilitates the systematic and meticulous identification of evidence in cases involving cybercrimes and misconduct. Applications range from tracking hacker footprints within client systems to identifying sources of defamatory emails and uncovering signs of financial fraud.

Module 1: Introduction

Module 2: Computer Forensic Incidents

Module 3: Investigation Process

Module 4: Disk Storage Concepts

Module 5: Digital Acquisition & Analysis

Module 6: Forensic Examination Protocols

Module 7: Digital Evidence Protocols

Module 8: CFI Theory

Module 9: Digital Evidence Presentation

Module 10: Computer Forensic Laboratory Protocols

Module 11: Computer Forensic Processing Techniques

Module 12: Digital Forensics Reporting

Module 13: Specialized Artifact Recovery

Module 14: e-Discovery and ESI

Module 15: Mobile Device Forensics

Module 16: USB Forensics

Module 17: Incident Handling

Mile2 - Lab 1: Preparing Forensic Workstation

  • Install AccessData FTK Imager
  • Install Autopsy
  • Configure National Software Reference Library (NSRL) for Autopsy
  • Install 7z
  • Install Registry Viewer
  • Install Password Recovery Tool Kit (PRTK - 5.21)

Lab 2: Chain of Custody

  • Chain of Custody: Search and Seizure
  • Chain of Custody: Forensic Imaging

Lab 3: Imaging Case Evidence / FTK Imager

Lab 4: Create a new case for Autopsy

  • Case creation in Autopsy

Lab 5: Reviewing Evidence / Autopsy (Case #1)

  • User MTBG: Attempted hacking of previous employer
  • Evidence review in Autopsy

Case Study scenario:

  • Evidence to be discovered (Challenge)

Final Report for MTBG case

Lab 6: Reviewing Evidence / Autopsy (Case #2)

  • Greg Schardt case

Case Study Scenario:

  • Evidence to be discovered (Challenge)

Number of participants


Price per participant

Testimonials (2)

Upcoming Courses

Related Categories