Back to Courses
Intermediate Level20-25 hours

Digital Forensics 101

Data is never truly deleted. Learn the scientific process of identifying, preserving, analyzing, and presenting digital evidence. This ULTRA-DETAILED course follows standard law enforcement and corporate incident response methodologies.

20 Modules
Meridin Certified Forensics Associate (MCFA)
Professional Grade Tradecraft

What You'll Learn

Scientific method in digital investigations
Legal frameworks and Chain of Custody
Live memory acquisition and analysis (Volatility)
Disk imaging and write-protection tradecraft
Deep-dive into Windows/Linux file systems
Registry forensics and user activity tracking
Browser and email forensic artifacts
Carving deleted files from unallocated space

The Locard Principle

"Every contact leaves a trace." In the digital realm, this is absolute. Whether it's a timestamp update, a registry key modification, or a memory fragment, the artifacts of activity are everywhere.

Forensic analysis requires extreme attention to detail. This course is designed to be Ultra-Detailed, training you to see what others miss.