CC 101 - Basic Digital Forensic Imaging

This course covers the fundamentals of computer operations, hardware function, configuration, and best practices for the protection, preservation, and imaging of digital evidence. Presentations and hands-on exercises cover topics such as partitioning, data storage, hardware and software write blockers, the boot-up and shutdown processes, live imaging, encryption detection, and duplicate imaging. This course incorporates computer forensic applications that experienced practitioners are currently using in the field.

Course structure:

• Fundamental building blocks for computer forensics, and best practices for forensic imaging, imaging at the scene, and validating forensic tools.
• Encryption detection with live imaging.
• Supporting hands-on exercises.

Prerequisites:

• "Cyber Investigation (CI) 102 - How Computers Work and Store Data" (online course).
• "CI 142 - Encryption" (online course).