This course takes a multidisciplinary approach to the investigation of incidents in which computers or computer technology play a significant role. Participants completing this course will be familiar with the core computer science theory and practical skills necessary to perform first level digital forensic investigations, understand the role of technology in investigating computer-related crimes, and be prepared to deal with law enforcement, judiciary and the attorneys involved in investigating cyber-crimes. This course has 15 modules. After completing the 15 modules, students may opt to undertake practical training in digital forensics to obtain the Certified Digital Forensics Professionals (CDFP) credentials. Practical training is covered in Module 16, which requires compulsory full-time training for one week.
This course will benefit business enterprises in multiple verticals, not-for-profit organizations, individuals and government agencies intent on pursuing any corrective action, litigation or establishing proof of guilt based on digital evidence.
A case in point could be the termination of an employee for a violation that may involve a digital artifact to support the allegation. The investigator must furnish irrefutable burden of proof derived from the digital artifact. If not, a lawyer who is knowledgeable about computers and its forensics dimension would convince the court to dismiss the case. Similarly, Government or investigative agencies need to be able to successfully prosecute or defend cases such as acts of fraud, computer misuse, pornography or counterfeiting and so forth.
Upon the successful completion of this course, participants will be able to:
Identify pertinent electronic evidence in the context of violations of specific laws; those that deal with computer and related crimes, also referred to as cyber laws or technology crime laws.
Locate and recover relevant electronic evidence from different platforms and Operating Systems using a variety of tools.
Identify and articulate probable causes that may be necessary to obtain a warrant to search and seize electronic artifacts, and recognize the limits of such warrants.
Recognize and maintain a chain of custody of electronic evidence. Follow a documented forensics investigation process covering the end-to-end digital forensics life cycle.
On successful completion of this unit, students will be able to:
Describe the role of digital forensics in criminal investigations, corporate investigation and auditing, and IT security operation.
Explain how data is stored on a local computer, remotely on the Internet and Cloud, and also the general structures of the LAN, WAN and the Internet.
Apply current industry best-practices to the analysis of digital evidence in hypothetical and real-case scenarios.
Undertake basic digital forensic investigation, from data acquisition and validation to evidence discovering, analysing, validating, and presenting, by using a variety of digital forensics tools.
Acquire important generic skills – communication skills involved in report writing and presentation, inquiry, analysis and interpretation, problem-solving, independent and group working, professionalism and social responsibility.
This program will be delivered through 15 learning modules at the first level. Those who complete all these modules successfully have the option of continuing with the sixteenth module that has nine hands-on lab exercises to be done during a two-week intense internship.
During the internship, participants will be guided by expert digital forensic investigators who bring with them rich practical experience in digital forensic investigation
Certificate of Participation!