Updated for 2018, the Introduction to Digital Forensics course (QAIDIGFOR) is designed to help commercial and government organizations collect, preserve and report on digital artefacts in a way which is suitable for use in investigations.
The course covers the broad topics essential to the digital forensics disciplines. It sets out a framework for investigations, covering the best practice as described by The National Police Chiefs' Council (NPCC) formally ACPO guidelines. Forensic fundamentals will be covered as well as the use of open source forensic tools. The data will be then analysed and an example report produced.
Participants to this course learn about the methods to identify, preserve, analysis and report on digital artefacts. Using a mixed approach of fundamentals and open source software, delegates will be able to select suitable tools and report on their findings in an evidential way.
The introduction to digital forensic course audience includes all teams across the IT, Security, Internal Audit, Law Enforcement and Government.
IISP Skills Alignment
This course is aligned to the following Institute of Information Security Professionals (IISP) Skills. More details on the IISP skills framework can be found here.
Continuous Professional Development (CPD)
CPD points can be claimed for GCT accredited courses at the rate of 1 point per hour of training for GCHQ accredited courses (up to a maximum of 15 points).
Module 1: Intro to Digital forensic
Module 2: The Legal Framework
Module 3: Collecting Digital Evidence
Module 4: Imaging Digital Evidence
Module 5: Hardware
Module 6: Information Representation and File Systems
Module 7: File Signatures & File Carving
Module 8: Windows Artefacts, Metadata and Hash Libraries
Module 9: Mobile Phone Forensics
Module 10: Digital Evidence Process Model
Module 11: Forensic Tools
The exam is now a Proctor-U APMG exam for the Certificate in Digital Forensics Fundamentals, which will be taken by delegates in their own time after the course. Delegates will receive individual emails to access their AMPG GCT candidate portal, typically available two weeks post exam.
If you experience any issues, please contact the APMG GCT technical help desk on 01494 4520450.
Join our public courses in our Istanbul, London and Ankara facilities. Private class trainings will be organized at the location of your preference, according to your schedule.