Digital forensics is a comprehensive practical course designed to introduce learners to the principles, processes, tools and techniques used to identify, preserve, acquire, examine, analyse and report digital evidence.
The course provides learners with a strong foundation in digital forensic investigations involving computers, mobile devices, storage media, networks, cloud environments and other digital systems. Learners will understand how digital evidence is identified and preserved while maintaining its integrity and ensuring that investigations are conducted in a systematic and legally appropriate manner.
The course covers forensic investigation methodology, evidence handling, chain of custody, disk imaging, file systems, deleted file recovery, metadata analysis, timeline analysis, operating system forensics, memory forensics, network forensics, mobile device forensics, cloud forensics and basic malware analysis.
Learners will also explore forensic tools and laboratory procedures, including evidence acquisition, hashing, forensic imaging, examination and documentation. Practical exercises will help learners develop skills in analysing forensic images and identifying relevant artefacts.
Special attention is given to evidence integrity, documentation, investigative ethics, privacy, legal considerations and professional reporting. Learners will learn how to distinguish between evidence, findings and assumptions and how to present forensic results clearly.
By the end of the course, learners should be able to plan a basic digital forensic investigation, preserve and acquire digital evidence, examine forensic images, identify relevant artefacts, recover selected deleted information, analyse timelines, document findings and prepare a professional forensic report.
Introduction to digital forensics
This module introduces digital forensics, its purpose, applications, investigation principles and role in cybersecurity and incident response.
1 LessonsDigital evidence and evidence handling
Learners explore how digital evidence is identified, collected, preserved, documented and handled while maintaining its integrity.
1 LessonsForensic investigation methodology
This module introduces a structured approach to conducting digital forensic investigations from initial preparation through examination, analysis and reporting.
2 LessonsForensic imaging and acquisition
Learners learn how forensic copies of storage media are created and verified for examination without unnecessarily altering the original evidence.
2 LessonsFile systems and storage analysis
This module teaches learners how to understand and examine file systems and storage structures commonly encountered during forensic investigations.
2 LessonsDeleted data and file recovery Module description: Learners explore techniques for identifying and recovering potentially relevant information from deleted files and unallocated storage areas.
2 LessonsWindows digital forensics
This module focuses on common Windows artefacts that can provide evidence about user activity, system activity and application usage.
2 LessonsLinux digital forensics
Learners explore Linux systems and the types of artefacts that can be examined during a forensic investigation.
2 LessonsMemory forensics
This module introduces the examination of volatile memory to identify processes, network connections, users and other information that may not be available on disk.
2 LessonsNetwork forensics
Learners learn how network traffic and network artefacts can be examined to understand communications, suspicious activity and security incidents.
2 LessonsBrowser and internet forensics
This module examines browser and internet-related artefacts that may provide information about web activity and user interactions.
2 LessonsMobile device forensics
Learners are introduced to the principles and challenges of investigating smartphones and other mobile devices.
1 LessonsCloud and remote evidence
This module introduces digital evidence stored in cloud platforms and remote services and explores the challenges involved in obtaining and analysing such evidence.
2 LessonsMalware and suspicious file analysis
Learners are introduced to basic forensic analysis of suspicious files and malware-related artefacts in a controlled laboratory environment.
2 LessonsForensic tools and laboratory practices
This module introduces common categories of digital forensic tools and teaches learners how to organise a controlled forensic laboratory environment.
2 LessonsLegal, ethical and professional considerations
Learners explore the importance of lawful evidence handling, privacy, professional ethics and proper documentation during digital forensic investigations
2 LessonsForensic reporting and presentation
This module teaches learners how to transform technical findings into clear, objective and professionally documented forensic reports.
2 LessonsFinal digital forensics investigation
The final module combines the knowledge and practical skills developed throughout the course in a complete simulated digital forensic investigation
2 Lessons
Senior ICT Academy
Login To Leave Review
- Price
USh450,000
USh550,000 - Instructor Senior ICT Academy
- Duration 150 days
- Category IT Certification Preparation
- Curriculum 18
- Lectures 33
- Enrolled 0