The Advanced Digital Media Forensics course covers topics not covered in the Basic
Digital Media Forensics course and additional topics likely to be encountered by
an experienced forensic examiner. This course covers incident response of live computer
systems, advanced usage of automated forensic tools, additional Windows forensic
topics, application artifacts, introduction to mobile device artifacts, encryption
and additional file system recognition. This course combines all facets of the learning
process; lecture and presentation, instructor led demonstration and hands-on practical
exercises. There is a final exercise and examination.
Students should have Basic Digital Media Forensics Training or Certifications in
CFCE, CCE, EnCe, ACE, SCERS.
- Incident Response
- Advanced Automated Tools and Virtualization
- Advanced Windows Forensics
- Communication and Messaging Forensics
- Data at Rest