Digital Forensics: Getting Started
Digital forensics is the process of recovery and investigation of digital artifacts involved in a cybercrime. This course will teach you the basics of evidence integrity, acquisition, examination, and analysis to finally create a forensics timeline.
What you'll learn
Digital forensics is now back in focus with the rapid increase in cybercrimes. In this course, Digital Forensics: Getting Started, you'll learn the skills required to conduct a digital forensics investigation from acquisition to the analysis phase. First, you'll discover the process of hypothesis testing by applying forensic science techniques to digital forensics. Next, you’ll explore how to overcome the challenges of digital evidence by using evidence integrity methods such as write blockers and verifying hashes. Finally, you'll learn how to examine the Windows Registry files and create a timeline of events for your case. When you’re finished with this course, you'll have a foundational understanding of the digital forensics domain that will help you conduct successful cybercrime investigations.
Table of contents
- Module Introduction 1m
- What Is Digital Evidence? 4m
- Challenges of Digital Evidence 1m
- Understanding Digital Artifacts 4m
- Case Study: Digital Artifacts 2m
- Role of Digital Evidence 4m
- Inculpatory vs. Exculpatory Evidence 2m
- Case Study: Inculpatory vs. Exculpatory Evidence 3m
- Evidence Integrity 7m
- Module Summary 1m
About the author
Shoaib is a Senior Cyber Security Professional currently based in Saudi Arabia. He has more than a decade of experience in the Information Security domain, and worked in various roles such as Security Engineer, Pentester, Forensic Examiner, Incident Handler, IT Auditor and also as a Cyber Security Consultant. His certifications include GCCC, GCFE and Lead Auditor for ISO - 27001/22301/20000. He is also a member of the GIAC Advisory Board. Shoaib is passionate about teaching and finds value in sh... more