Course Topics & Program

Day One Overview

Becoming a Digital Forensics Examiner begins with a firm knowledge of what the goals of digital forensic analysis are as well as knowing the many accepted ways to properly acquire and authenticate evidence.

On the first day of class students will become familiar with the basic knowledge and concepts that every competent Digital Forensics Examiner must master. The topics covered on this day will begin to show the student what a true expert needs to know, as well as explain an approach to forensics that will set the student apart from the pack of "point-and-click" analysts. On this day you will be introduced to our comprehensive and repeatable process for conducting digital forensic examinations.

We won't just be "flipping through slides" in order to get through the material. Real-world examples of how to use the information that will be imparted to you begins on this day, and will continue throughout the course.

DAY ONE TOPICS
Ethics and Code of Conduct
Digital Forensics Defined/Working as a Digital Forensics Examiner

Aspects of Digital Forensics

  • Acquisition
  • Preservation
  • Identification
  • Extraction
  • Interpretation
  • Documentation
  • Legal Processes
  • Integrity of Evidence
  • Factual Reporting
  • Providing Expert Opinion

Assuring Admissibility of Evidence

  • Creating a Forensically Sound Working Environment
  • Forensic Workstation Setup
  • Proper Authority
  • Proof of Expertise
  • Rules of Evidence
  • The Five Must Do's of Digital Forensics

Technical Basics

  • Allocated/Unallocated Space
  • Slack Space
  • Clusters versus Sectors
  • Active, Archival, and Latent Data

Evening Session: Optional, Until 21:00
Open Topics Based On Student Requests