Digital Forensics Courses

EC-Council

Digital Forensics Essentials (DFE)

Digital Forensics Essentials helps learners increase their competency and expertise in digital forensics and information security skills, thereby adding value to their workplace and employer. This course will introduce learners to Computer Forensics Fu…

• Coursera
• 25 hours worth of material, 6 weeks long
• 6th Mar, 2023
• Free Online Course (Audit)

Infosec

Digital Forensics Concepts

127 ratings at Coursera

In the Digital Forensics Concepts course, you will learn about legal considerations applicable to computer forensics and how to identify, collect and preserve digital evidence. This course dives into the scientific principles relating to digital forensic…

• Coursera
• 6-7 hours worth of material, 11 weeks long
• 13th Mar, 2023
• Free Online Course (Audit)

Infosec

Technical Deep Dive with Incident Response Tools

45 ratings at Coursera

The Cyber Incident Response course will give students an understanding of how incidents are responded to at a high level, as well as allow them to build important technical skills through the hands-on labs and projects. This course starts with a high-le…

• Coursera
• 4-5 hours worth of material, 5 weeks long
• 6th Mar, 2023
• Free Online Course (Audit)

Infosec

Windows OS Forensics

40 ratings at Coursera

The Windows OS Forensics course covers windows file systems, Fat32, ExFat, and NTFS. You will learn how these systems store data, what happens when a file gets written to disc, what happens when a file gets deleted from disc, and how to recover deleted f…

• Coursera
• 7-8 hours worth of material, 6 weeks long
• 13th Mar, 2023
• Free Online Course (Audit)

Infosec

Stages of Incident Response

39 ratings at Coursera

The Cyber Incident Response course will give students an understanding of how incidents are responded to at a high level, as well as allow them to build important technical skills through the hands-on labs and projects. This course starts with a high-le…

• Coursera
• 4-5 hours worth of material, 7 weeks long
• 6th Mar, 2023
• Free Online Course (Audit)

Infosec

Windows Registry Forensics

29 ratings at Coursera

The Windows Registry Forensics course shows you how to examine the live registry, the location of the registry files on the forensic image, and how to extract files.

• Coursera
• 8-9 hours worth of material, 8 weeks long
• 13th Mar, 2023
• Free Online Course (Audit)

DFIRScience

Starting a New Digital Forensic Investigation Case in Autopsy 4.19+

1 review

Syllabus: Starting a digital investigation with Autopsy Setting up your forensic workstation Organize case files Start your documentation! Organizing suspect image data Starting a new case in Autopsy Autopsy: Case Information Autopsy: Optional In…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Taking Memory Forensics to the Next Level

Syllabus: Intro Documentation Volatility Framework Purpose Methodology Sampling Profile Library Baselines (continued) Caveat: Hook comparisons Hook comparisons (continued) Whitelisting/Blacklisting Indicators of Compromise (IOCs) Cyboxer Plugin Example S…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Chris Hay

Origins of the Bitcoin Whitepaper - Neo4j Tutorial on Digital Forensics and Document Fingerprinting

Syllabus: - Introduction - Fingerprinting - Creating a PDF document sample - Analyzing a Digital Footprint or Fingerprint of a PDF document - Creating a graph database model - Analyzing the Digital Fingerprint of the original Bitcoin Whitepaper - L…

• YouTube
• 1-2 hours worth of material
• On-Demand
• Free Online Course

DFIRScience

Tsurugi Linux - Device Unlocker Code Review

Syllabus: Intro Device Unlocker Unlocker Code check_root function intro function menu function Device unlock installer function udev rules for auto read-only Main functions - overview

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

DFIRScience

Intro to Windows Forensics: Windows Registry Artifacts - TryHackMe Walkthrough

Syllabus: TryHackMe WindowsForensics Open TryHackMe Windows Forensics room Introduction to Windows Forensics Windows Registry and Forensics Exploring Windows Registry System Information and System Accounts Usage or knowledge of files/folders Ev…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

DFIRScience

Data Artifacts, Analysis Results and Reporting in Autopsy 4.19+

Syllabus: Autopsy Data Artifacts Exploring the Windows 10 disk image Autopsy: Data Artifacts Installed Programs Metadata Operating System Information Recent Documents Recycle Bin Run Programs Run Programs - Verify with additional evidence Autop…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

DFIRScience

Introduction to Memory Forensics with Volatility 3

Syllabus: Introduction to Volatility 3 Install Volatility 3 on Windows Volatility first run check Find the path of your target memory image Get RAM image info with windows.info Listing installed plugins Get process list from RAM with windows.pslis…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

DFIRScience

Linux Forensics with Linux - CTF Walkthrough

Syllabus: Cyber5W Linux Forensics CTF CTF Case Scenario How this walkthrough works Download images and setup Verify Expert Witness Format File E01 with ewfverify Mount the suspect disk image with ewfmount and mount Get disk partition offsets with m…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

DFIRScience

Starting with Velociraptor Incident Response

Syllabus: Velociraptor Incident Response WARNING Downloading Velociraptor IR Verify Velociraptor IR binaries IMPORTANT Download Velociraptor IR developer key Setting binary run permissions in Linux Velociraptor IR first run Creating a client a ser…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course