What you'll learn

It is essential that practitioners involved in incident response and forensic teams have a good foundation knowledge of the concepts behind the processes and decisions that need to be made throughout an investigation. In this course, Digital Forensics: Data Sources and Workstations, you’ll learn to apply approved processes and make informed decisions throughout a forensic investigation. First, you’ll explore the main phases involved within a forensic investigation. Next, you’ll discover the main data types and how to acquire and handle them correctly. Finally, you’ll learn how to prepare and maintain a forensic environment to support an investigation. When you’re finished with this course, you’ll have the skills and knowledge of the phases and processes involved in dealing with an incident that requires the use of forensics in order to support an investigation.