Description
Digital Forensics & Incident Response is a written, self-paced course in six modules. You cover digital evidence collection and chain of custody; disk and memory forensics using open-source tools such as Autopsy and Volatility; log analysis and timeline reconstruction; malware triage and behavioural analysis in a safe environment; the NIST and SANS incident response frameworks; and writing forensic reports and executive summaries.
It is an educational introduction, not a forensic certification or legal training, and it does not qualify you to give expert evidence. It cannot promise a job outcome. Forensic and legal requirements differ between jurisdictions and organisations, so follow your organisation's policies and legal advice, and only analyse systems and data you are authorised to examine. Handle live malware only in an isolated lab.
What you will be able to do
- Collect and document digital evidence with a clear chain of custody
- Explain the order of volatility and why it matters
- Run basic disk and memory analysis in a lab with Autopsy and Volatility
- Build an incident timeline from multiple log sources
- Write a clear forensic report and a short executive summary
Educational content only. No income, revenue or earnings results are promised or implied. This course does not award a certification, licence or professional credential.
