Cybersecurity
Cybersecurity Fundamentals
Protect systems and data. Learn core security concepts, common threats, and defenses every professional and business needs…
USD 89
Digital Forensics Introduction
Collect, preserve and analyse digital evidence from computers and phones, build a timeline of what happened, and report your findings in a way that stands up to scrutiny.
About this course
Investigate security incidents. Learn evidence collection, analysis, and reporting to trace and understand digital attacks.
What you will learn
- Explain the stages of a forensic investigation and the legal and ethical limits that govern each one
- Maintain a chain of custody record and handle evidence so that its integrity can be proven
- Create verified forensic images of drives and capture volatile data and memory in the right order
- Recover deleted files and interpret key Windows, browser and email artefacts
- Build and interpret a timeline that correlates events from several evidence sources
- Write a clear, defensible forensic report and explain technical findings to non-technical readers
Curriculum
Module 1Forensics Foundations4 lessons
- 1What Digital Forensics Covers Free preview
- 2Legal Process and Chain of Custody
- 3Evidence Types and Sources
- 4The Forensic Workstation
- QModule quiz (4 questions)
Module 2Acquisition4 lessons
- 5Imaging Drives Correctly
- 6Volatile Data and Memory Capture
- 7Mobile Device Considerations
- 8Hashing and Integrity
- QModule quiz (4 questions)
Module 3Analysis4 lessons
- 9File Systems and Deleted Data
- 10Windows Artifacts That Tell Stories
- 11Browser and Email Evidence
- 12Timeline Analysis
- QModule quiz (4 questions)
Module 4Reporting3 lessons
- 13Documenting Findings Defensibly
- 14Expert Communication
- 15Course Project: Analyse a Sample Image
- QModule quiz (4 questions)
PFinal project: Investigate a Sample Disk Image and Report Your Findings
Who this course is for
- IT support and security staff who are the first to respond when an incident happens
- Beginners who want a structured first step towards a digital forensics or incident response role
- Auditors, investigators and managers who need to understand how digital evidence is gathered and judged
Requirements
- A Windows, macOS or Linux computer with at least 8 GB of RAM and 50 GB of free disk space
- Free tools installed during the course: Autopsy, FTK Imager or a Linux live environment, and a hashing utility
- Comfort using files, folders and a command line at a basic level; no prior forensics knowledge is needed
What is included
Written lessons
15 lessons, each with a practical exercise and key points to remember.
Module quizzes
A short quiz at the end of each module. Pass mark 70%, and you can retake it.
Final project
Investigate a Sample Disk Image and Report Your Findings. A practical brief with steps and a way to check your own work.
Certificate
A certificate of completion from EMFAD Courses with a unique code anyone can verify.
How the certificate works
Complete every lesson and pass every module quiz with 70% or more. Your certificate then appears in your learner area, ready to print or save as PDF. It shows your name, the course title, the completion date and a unique code. It is a certificate of completion from EMFAD Courses, not an accredited qualification.
More in Cybersecurity
All →Cybersecurity
Identity and Access Management
Control who accesses what. Master authentication, authorization, single sign-on, and least-privilege to secure users and…
USD 39
Cybersecurity
Information Security Management (ISO 27001)
Build a security program. Understand ISO 27001, risk assessment, controls, and policies to protect information across an…
USD 49