EC-Council
EC-Council Digital Forensics Essentials (DFE)
Discover how digital evidence is found, preserved and analysed.
2 daysFoundation12 modules
About this course
Discover how digital evidence is found, preserved and analysed. Over two days you will learn the investigation process, disks and file systems, data acquisition and anti-forensics, and forensics on Windows, Linux, macOS, networks, the web, the dark web, email and malware.
What you'll learn
- Key issues plaguing the computer forensics
- Different types of digital evidence
- Computer forensic investigation process and its phases
- Different types of disk drives and file systems
- Data acquisition methods and data acquisition methodology
- Anti-forensics techniques and countermeasures
- Volatile and non-volatile information gathering from Windows, Linux, and Mac Systems
- Network forensics fundamentals, event correlation, and network traffic investigation
- Web server logs and web applications forensics
- Dark web forensics
- Email crime investigation
- Malware forensics fundamentals and different types of malware analysis
Curriculum
12 modules
- Fundamentals of Computer Forensics
- Digital Evidence
- Forensic Readiness
- Roles and Responsibilities of a Forensic Investigator
- Legal Compliance in Computer Forensics
- Forensic Investigation Process and its Importance
- Forensic Investigation Process - Pre-Investigation Phase
- Forensic Investigation Process - Investigation Phase
- Forensic Investigation Process - Post investigation Phase
- Different Types of Disk Drives and their Characteristics
- Logical Structure of a Disk
- Booting Process of Windows, Linux, and Mac Operating Systems
- File Systems of Windows, Linux, and Mac Operating Systems
- File System Examination
- Data Acquisition Fundamentals
- Types of Data Acquisition
- Data Acquisition Format
- Data Acquisition Methodology
- Anti-Forensics and its Techniques
- Anti-Forensics Countermeasures
- Volatile and Non-Volatile Information
- Windows Memory and Registry Analysis
- Cache, Cookie, and History Recorded in Web Browsers
- Windows Files and Metadata
- Volatile and Non-Volatile Data in Linux
- Analyze Filesystem Images Using The Sleuth Kit
- Memory Forensics
- Mac Forensics
- Network Forensics Fundamentals
- Event Correlation Concepts and Types
- Identify Indicators of Compromise (IoCs) from Network Logs
- Investigate Network Traffic
- Web Application Forensics
- IIS and Apache Web Server Logs
- Investigating Web Attacks on Windows-based Servers
- Detect and Investigate Attacks on Web Applications
- Dark Web
- Dark Web Forensics
- Tor Browser Forensics
- Email Basics
- Email Crime Investigation and its Steps
- Malware, its Components and Distribution Methods
- Malware Forensics Fundamentals and Recognize Types of Malware Analysis
- Static Malware Analysis
- Analyze Suspicious Word Documents
- Dynamic Malware Analysis
- System Behavior Analysis
- Network Behavior Analysis
Who it's for
Students, career starters and IT staff curious about forensics.
Before you start
No formal prerequisites. Bring curiosity and a willingness to practise.
Related courses
More in EC-Council →Foundation
Artificial Intelligence Essentials (AIE)
EC-Council
View course →Intermediate
Certified AI Program Manager (CAIPM)
EC-Council
View course →Intermediate
Certified Offensive AI Security Professional (COASP)
EC-Council
View course →Intermediate
Certified Responsible AI Governance & Ethics (CRAGE)
EC-Council
View course →Intermediate
EC-Council Certified Application Security Engineer (CASE).NET
EC-Council
View course →Intermediate
EC-Council Certified Chief Information Security Officer (C|CISO)
EC-Council
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.