The following labs introduce the learner to the legal and technical aspects of Digital Forensics, including general forensic processes, imaging, hashing, file recovery, file system basics, identifying mismatched file types, reporting, and laws regarding evidence:

  1. Introduction to File Systems
  2. Common Locations of Windows Artifacts
  3. Hashing Data Sets
  4. Drive Letter Assignments in Linux
  5. The Imaging Process
  6. Introduction to Single Purpose Forensic Tools
  7. Introduction to Autopsy Forensic Browser
  8. The FAT File System
  9. The NTFS File System
  10. Browser Artifact Analysis
  11. Communication Artifacts
  12. User Profiles and the Windows Registry
  13. Log Analysis
  14. Memory Analysis
  15. Forensic Case Capstone