Learning Outcomes

In this free course, you will learn how to:

• Define the scope, boundaries, and stakeholders of digital forensics.
• Compare physical, logical, and targeted imaging methods.
• Recognise malware indicators using static and dynamic tools.
• Distinguish between full packet captures and flow records.
• Relate host identities to cloud identities for a unified view
• Describe data acquisition methods for encrypted endpoints.
• Evaluate benign administrative scripts for potential misuse.
• Classify mobile acquisition modes based on device security states.
• Summarise forensic findings for executive and legal audiences.