Collection and Analyzing Digital Evidence

Students will learn the general idea on good practices regarding the evidence gathering. You will be able to perform memory dumps, analyze them and recognize indicators of compromise. Students will also learn how to dump and analyze forensic data from disks, and how to properly extract and interpret evidence.

• Beginners in Cybersecurity
• Specialists in IT
• Cybersecurity Specialists

At least 1-2 years experience in cybersecurity or 4-5 years experience in IT.

• Evidence Gathering
• Memory: Dumping and Analysis
• Memory: Indicators of compromise
• Disk: dumping & analysis
• Disk: extracting and interpreting evidence