Course subjects
Module 1: Computer Forensics in Today’s World
Understand the Fundamentals of Computer Forensics
Understand Cybercrimes and their Investigation Procedures
Understand Digital Evidence
Understand Forensic Readiness, Incident Response and the Role of SOC (Security
Identify the Roles and Responsibilities of a Forensic Investigator
Understand the Challenges Faced in Investigating Cybercrimes
Understand Legal Compliance in Computer Forensics
Module 2: Computer Forensics Investigation Process
Understand the Forensic Investigation Process and its Importance
Understand the Pre-investigation Phase
Understand First Response
Understand the Post-investigation Phase
Module 3: Understanding Hard Disks and File Systems
Describe Different Types of Disk Drives and their Characteristics
Explain the Logical Structure of a Disk
Understand Booting Process of Windows, Linux and Mac Operating Systems
Understand Various File Systems of Windows, Linux and Mac Operating Systems
Examine File System Using Autopsy and The Sleuth Kit Tools
Understand Storage Systems
Understand Encoding Standards and Hex Editors
Analyse Popular File Formats Using Hex Editor
Module 4: Data Acquisition and Duplication
Understand Data Acquisition Fundamentals
Understand Data Acquisition Methodology
Prepare an Image File for Examination
Module 5: Defeating Anti-Forensics Techniques
Understand Anti-Forensics Techniques
Discuss Data Deletion and Recycle Bin Forensics
Illustrate File Carving Techniques and Ways to Recover Evidence from Deleted Partitions
Explore Password Cracking/Bypassing Techniques
Detect Steganography, Hidden Data in File System Structures, Trail Obfuscation, and File Extension Mismatch
Understand Techniques of Artifact Wiping, Overwritten Data/Metadata Detection, and Encryption
Detect Program Packers and Footprint Minimising Techniques
Understand Anti-Forensics Countermeasures
Module 6: Windows Forensics
Collect Volatile and Non-volatile Information
Perform Windows Memory and Registry Analysis
Examine the Cache, Cookie and History Recorded in Web Browsers
Examine Windows Files and Metadata
Understand Text-based Logs and Windows Event Logs
Module 7: Linux and Mac Forensics
Understand Volatile and Non-volatile Data in Linux
Analyse Filesystem Images Using the Sleuth Kit
Demonstrate Memory Forensics Using Volatility and PhotoRec
Understand Mac Forensics
Module 8: Network Forensics
Understand Network Forensics
Explain Logging Fundamentals and Network Forensic Readiness
Summarise Event Correlation Concepts
Identify Indicators of Compromise (IoCs) from Network Logs
Investigate Network Traffic
Perform Incident Detection and Examination with SIEM Tools
Monitor and Detect Wireless Network Attacks
Module 9: Investigating Web Attacks
Understand Web Application Forensics
Understand Internet Information Services (IIS) Logs
Understand Apache Web Server Logs
Understand the Functionality of Intrusion Detection System (IDS)
Understand the Functionality of Web Application Firewall (WAF)
Analysing ModSecurity Audit Logs
Investigate Web Attacks on Windows-based Servers
Detect and Investigate Various Attacks on Web Applications
Module 10: Dark Web Forensics
Module 11: Database Forensics
Understand Database Forensics and its Importance
Determine Data Storage and Database Evidence Repositories in MSSQL Server
Collect Evidence Files on MSSQL Server
Perform MSSQL Forensics
Understand Internal Architecture of MySQL® and Structure of Data Directory
Understand Information Schema and List MySQL Utilities for Performing Forensic Analysis
Perform MySQL Forensics on WordPress Web Application Database
Module 12: Cloud Forensics
Understand the Basic Cloud Computing Concepts
Understand Cloud Forensics
Understand the Fundamentals of Amazon Web Services (AWS)
Determine How to Investigate Security Incidents in AWS
Understand the Fundamentals of Microsoft Azure
Determine How to Investigate Security Incidents in Azure
Understand Forensic Methodologies for Containers and Microservices
Module 13: Investigating Email Crimes
Module 14: Malware Forensics
Define Malware and Identify the Common Techniques Attackers Use to Spread
Understand Malware Forensics Fundamentals and Recognise Types of Malware Analysis
Understand and Perform Static Analysis of Malware
Analyse Suspicious Word and PDF Documents
Understand Dynamic Malware Analysis Fundamentals and Approaches
Analyse Malware Behaviour on System Properties in Real-time
Analyse Malware Behaviour on Network in Real-time
Describe Fileless Malware Attacks and How they Happen
Perform Fileless Malware Analysis – Emotet
Module 15: Mobile Forensics
Understand the Importance of Mobile Device Forensics
Illustrate Architectural Layers and Boot Processes of Android and iOS Devices
Explain the Steps Involved in Mobile Forensics Process
Investigate Cellular Network Data
Understand SIM File System and its Data Acquisition Method
Illustrate Phone Locks and Discuss Rooting of Android and Jailbreaking of iOS Devices
Perform Logical Acquisition on Android and iOS Devices
Perform Physical Acquisition on Android and iOS Devices
Discuss Mobile Forensics Challenges and Prepare Investigation Report
Module 16: IoT Forensics
Understand IoT and IoT Security Problems
Recognise Different Types of IoT Threats
Understand IoT Forensics
Perform Forensics on IoT Devices
