Introduction
Welcome
()
Module introduction
()
What is digital forensics?
()
The forensic process
()
Types of digital evidence
()
1. Scope of Digital Forensics in Cybersecurity
Where digital forensics fits in the cybersecurity lifecycle
()
Real-world use cases: Insider threats
()
Potential sources of evidence
()
2. Legal, Ethical, and Professional Considerations
Chain of custody and admissibility in court
()
Privacy consent and ethical boundaries
()
Regional and international laws impacting digital evidence
()
3. The Evidence Acquisition Process
Module introduction
()
Types of acquisition and image formats
()
Precautions during evidence handling
()
Write blockers and imaging best practices
()
4. Using Forensic Tools for Disk Imaging
Disk imaging with FTK Imager and Analysis in Autopsy
()
Bit-by-bit imaging using DD (Linux CLI)
()
Hashing for integrity (MD5 - SHA1 - SHA256)
()
5. Preserving Evidence and Chain of Custody
Maintaining forensic soundness
()
Chain of custody concept and importance
()
Labelling and evidence bagging procedures
()
6. Analyzing File Systems and Metadata
Module introduction
()
Understanding NTFS, FAT32, and EXT file systems
()
Metadata: MAC times — modified, accessed, and created
()
Recovering hidden, deleted, or orphaned files
()
7. Investigating User Activity and System Artifacts
Analyzing browser history and cookies
()
Prefetch files and registry analysis (Windows)
()
Tracking document access and USB device usage
()
Interpreting log files (Windows Event Logs_ Syslog)
()
8. Timeline Creation and Evidence Correlation
Timeline creation using Autopsy
()
Correlating data across artifacts and sources
()
Interpreting anomalies and suspicious gaps
()
9. Structure and Components of a Forensic Report
Module introduction
()
Purpose and structure of a forensic report
()
Required sections: Executive summary, methodology, findings, and conclusions
()
Writing for non-technical audiences
()
Common mistakes to avoid: Bias, jargon, and vague language
()
10. Documenting Evidence and Chain of Custody
Evidence storage and management in a cloud environment
()
Completing and preserving chain of custody forms
()
Anti-forensic techniques and mitigation strategies
()
Screenshots and supporting visual evidence
()
11. Finalizing and Presenting Your Forensic Report
Writing clear conclusions based on evidence
()
Case review and criticism
()
Ethics and responsibility in reporting
()
Course wrap-up
()
Ex_Files_Digital_Forensics_Essentials.zip
(77 KB)