Digital Forensics Essentials

Digital Forensics Essentials provides an entry-level introduction to investigating digital evidence. It covers forensic process, evidence handling, storage and file...

Enquire about this programme Back to catalogue

Digital Forensics FundamentalsBy Enquiry

Programme overview

Digital Forensics Essentials provides an entry-level introduction to investigating digital evidence. It covers forensic process, evidence handling, storage and file systems, data acquisition, operating systems, networks, web activity, email, malware, mobile devices, cloud services, and reporting. Participants will practise the structured handling and analysis of digital evidence while maintaining integrity, documentation, repeatability, and defensible reporting.

Programmes can be delivered via

HRD Corp Claimable

Yayasan Peneraju aligned

EC-Council

At a glance

Course code: EC-026
Provider: EC-Council
Category: Digital Forensics Fundamentals
Status: By Enquiry
Duration: Enquire us
Price: Contact us

What participants should gain

Explain the digital-forensic investigation process
Preserve and acquire evidence using basic forensic principles
Identify artefacts from systems, networks, applications, and devices
Recognise anti-forensics and common investigation challenges
Document findings and maintain chain of custody

Participant readiness

Basic knowledge of computers and operating systems
No previous digital-forensics experience required
Suitable for students, IT staff, security beginners, and career changers

Who this course is for

Digital-forensics analysts, incident responders, SOC analysts, investigators, and auditors
IT and security professionals responsible for evidence collection or technical investigations
Law-enforcement or corporate-investigation personnel working with digital evidence

How the course is delivered

This programme will be conducted through interactive lectures, forensic demonstrations, guided evidence-acquisition and analysis exercises, case studies, tool-based labs, documentation activities, and investigation reporting.

Course outline

Module and topic breakdown

Module 1: Digital Forensics Fundamentals

Forensic readiness, legal authority, scope, integrity, repeatability, and documentation

Module 2: Forensic Investigation Process and Legal Considerations

Core concepts, terminology, and purpose of Forensic Investigation Process and Legal Considerations

Module 3: Digital Evidence, Chain of Custody, and Documentation

Evidence identification, relevance, authority, integrity, preservation, and documentation

Module 4: Storage Media and File System Fundamentals

File-system structures, partitions, volumes, allocation, metadata, directories, and timestamps

Module 5: Data Acquisition and Imaging

Live and dead acquisition, physical and logical imaging, memory capture, and targeted collection

Module 6: Windows Forensics Fundamentals

Windows file systems, registry, event logs, users, services, tasks, execution, and persistence artefacts

Module 7: Linux and macOS Forensics Fundamentals

Forensic readiness, legal authority, scope, integrity, repeatability, and documentation

Module 8: Network and Web Forensics Fundamentals

Forensic readiness, legal authority, scope, integrity, repeatability, and documentation

Module 9: Email and Messaging Forensics

Message headers, routing, timestamps, authentication, content, attachments, links, and mailbox artefacts

Module 10: Malware and Anti-Forensics Awareness

Forensic readiness, legal authority, scope, integrity, repeatability, and documentation

Module 11: Mobile and Cloud Forensics Fundamentals

Cloud logs, identities, management events, workload data, storage, network, and provider evidence sources

Module 12: Analysis, Reporting, and Case Review

Audience, purpose, scope, methodology, limitations, evidence, and executive summary

Assessment and completion

Continuous knowledge checks and facilitator feedback throughout the programme
Completion of guided exercises, scenarios, labs, or case-study activities applicable to the course
Final review or practical activity to confirm understanding of the stated course objectives
Official EC-Council examination and certification requirements depend on the selected training package and current exam version

Availability

This programme currently requires an enquiry for pricing, scheduling, and delivery arrangements.

Programme enquiry

Discuss pricing, delivery, or corporate customisation

Use this form to confirm availability, request pricing clarification, or discuss a private cohort for your organisation.