Digital Forensics Foundation 002

Introduction to Digital Forensics (DF) is a five-day training program that builds a solid foundation in computer forensics and a clear understanding of the end-to-end DF process and open-source tools.
The course prepares participants to progress toward advanced topics and pursue professional certifications.

Who Should Attend?

Anyone seeking structured knowledge in computer forensics with a good general understanding of computers.

Course Information

• Duration: 5 days
• Level: Foundation / Beginner
• Delivery: Classroom, hands-on labs
• Prerequisites: Basic computer literacy

Course Layout

Module 1 – The Foundation

Core concepts, terminology, evidence types, and DF workflow overview.

Module 2 – Digital Forensics Process & Standards

• Windows Filesystem Architecture overview
• Windows OS Architecture overview
• Computer Memory Architecture overview
• Digital Forensics process & standards
• Evidence discovery process & image types
• Evidence categories & acquisition process

Module 3 – Computer Forensics

• Filesystem identification & file carving
• File signature analysis & file analysis
• Recycle Bin, logs, jump lists, and shortcut forensics
• Memory acquisition and analysis
• E-mail & browser investigations
• File hashing

Module 4 – Network Forensics

• TCP/IP refresher
• Network traffic analysis
• TCP streaming & object extraction

Module 5 – Mobile Forensics

• Overview of iOS and Android
• Mobile forensics approaches on iOS & Android

Module 6 – Anti-Forensics & Reporting

• Anti-forensics techniques overview
• DF report structure and writing style

Common Questions

Q: Does the course include hands-on labs?
A: Yes. Labs cover both computer and mobile scenarios.

Q: Is Incident Response included?
A: No. IR is covered in a separate dedicated course at AGT.

Q: I already do DF work — is this still useful?
A: This is an introductory course. Advanced/custom topics are available under other AGT programs.

Q: Is it a full 8-hour day?
A: The training day is approx. 4 hours of classroom time plus a 30-minute coffee/lunch break (total ≈ 4.5 hours).

Q: What certificate do I receive?
A: Participants receive an AGT Completion Certificate. This course accelerates readiness for international certifications; eligibility depends on each certification body’s requirements.