Computer Forensics Foundation Training - Canada

Computer Forensics Foundation Training Course Outline

Module 1: Digital Forensics Profession and Investigations

• Overview of Digital Forensics
• Process of Digital Forensics
• Maintaining Professional Conduct
• Types of Digital Forensics
• Procedures for Private-Sector High-Tech Investigations
• Data Recovery Workstations and Software
• Conducting an Investigation

Module 2: Data Acquisition

• Storage Formats for Digital Evidence
• Determining the Best Acquisition Method
• Contingency Planning for Image Acquisitions
• Using Acquisition Tools
• Acquiring Data with a Linux Boot CD
• Validating Data Acquisitions
• Performing RAID Acquisitions
• Using Remote Network Acquisition Tools
• Using Other Forensics Acquisition Tools
• Create an Image with FTK Imager

Module 3: Processing Crime and Incident Scenes

• Identifying Digital Evidence
• Collecting Evidence in Private-Sector Incident Scenes
• Processing Law Enforcement Crime Scenes
• Preparing for a Search
• Securing a Digital Incident or Crime Scene
• Seizing Digital Evidence at the Scene
• Storing Digital Evidence
• Obtaining a Digital Hash
• Acquiring Evidence with OSForensics

Module 4: Working with Windows and CLI Systems

• File Systems
• Microsoft File Structures
• Examining NTFS Disks
• Whole Disk Encryption
• Windows Registry
• Microsoft Startup Tasks
• Virtual Machines
• Virtual Machines Using Oracle VirtualBox

Module 5: Digital Forensics Tools

• Evaluating Digital Forensics Tool Needs
• Digital Forensics Software and Hardware Tools
• Validating and Testing Forensics Software

Module 6: Linux and Macintosh File Systems

• Examining Linux File Structures
• Macintosh File Structures
• Using Linux Forensics Tools

Module 7: Recovering Graphics Files

• Recognising a Graphics File
• Data Compression
• Identifying Unknown File Formats
• Copyright Issues with Graphics
• Use Autopsy for Search and Extract Recover Evidence

Module 8: Digital Forensics Analysis and Validation

• Determining What Data to Collect and Analyse
• Validating Forensic Data
• Addressing Data-Hiding Techniques

Module 9: Virtual Machine Forensics, Live Acquisitions, Network Forensics, E-Mail, and Social Media Investigations

• Virtual Machine Forensics
• Performing Live Acquisitions
• Network Forensics Overview
• Role of E-Mail in Investigations
• Roles of the Client and Server in E-Mail
• E-Mail Servers
• Using Specialised E-Mail Forensics Tools
• Applying Digital Forensics Methods to Social Media Communications
• Network Analysis Using Wireshark

Module 10: Mobile Device Forensics and the Internet of Anything

• Mobile Device Forensics
• Acquisition Procedures for Mobile Devices
• Forensics in the Internet of Anything

Module 11: Report Writing for High-Tech Investigations

• Importance of Reports
• Guidelines for Writing Reports
• Generating Report Findings with Forensics Software Tools

Who Should Attend this Computer Forensics Foundation Training?

This Computer Forensics Course provides a solid introduction to the fundamental concepts of digital forensics, including the processes of identifying, collecting, preserving, and analysing electronic evidence. It is designed for learners seeking foundational expertise in the field and serves valuable for professionals such as:

• Cybersecurity Professionals
• Digital Forensic Analysts
• IT Security Specialists
• Law Enforcement Officers 
• Legal Professionals
• Incident Response Teams
• Internal Audit and Compliance Officers

Prerequisites for the Computer Forensics Foundation Training

There are no formal prerequisites for the Computer Forensics Foundation Training Course.

Computer Forensics Foundation Training Overview

Computer Forensics Foundation Training provides delegates with a clear introduction to legal, ethical, and technical principles in digital investigations. It covers core forensic methods that support accurate collection, examination, and interpretation of digital evidence.

Upskilling through this training enhances delegates’ ability to handle digital evidence responsibly and analyse data with precision. It strengthens foundational investigation skills and prepares delegates to address evolving challenges in computer forensics and cybercrime.

This 2‑Day course offered by The Knowledge Academy enables delegates to apply computer forensics principles confidently in practical scenarios. It combines structured learning with practical guidance to support effective investigation techniques and skill development.

Computer Forensics Foundation Training Course Objectives

• To understand the fundamentals of computer forensics and digital investigations 
• To learn how to identify, collect, and preserve digital evidence correctly 
• To gain knowledge of forensic tools and investigation techniques 
• To understand legal and ethical considerations in digital forensics 
• To analyse digital data for incident response and investigations 
• To build a foundation for further study or roles in cyber forensics and security

Upon completion of this Computer Forensics Course, delegates will be well-prepared to embark on a career in Computer Forensics, contribute to investigations, and advance their expertise in the field, benefiting from a strong foundational knowledge base.

What’s Included in this Computer Forensics Foundation Training Course?

• World-Class Training Sessions from Experienced Instructors
• Computer Forensics Foundation Certificate
• Digital Delegate Pack