Digital Forensics Essentials Training in Kraków, Poland

This course introduces participants to the fundamentals of digital forensics, covering concepts, tools, and techniques required to collect, preserve, analyze, and report digital evidence. It is designed for beginners and professionals who want to build a strong foundation in the field of cyber investigations.

Introduction to Digital Forensics

• Definition, scope, and importance of digital forensics

• Types of digital forensics: Computer, Mobile, Network, Cloud

• Legal and ethical considerations

Forensic Process & Methodologies

• Phases: Identification, Preservation, Collection, Examination, Analysis, Reporting

• Chain of custody and handling digital evidence

• Standards and guidelines (NIST, ISO)

Tools and Techniques

• Open-source and commercial forensic tools (Autopsy, FTK Imager, EnCase overview, Volatility, Wireshark)

• Imaging and cloning of digital media

• Data recovery and extraction methods

File System and Disk Forensics

• FAT, NTFS, EXT file systems basics

• Metadata, timestamps, and file artifacts

• Recovering deleted and hidden files

Memory and Network Forensics

• Introduction to volatile memory forensics

• Analyzing processes, connections, and system artifacts

• Basics of network packet analysis

Log and Malware Analysis Basics

• System and application log collection & interpretation

• Identifying suspicious activities through logs

• Intro to static and dynamic malware analysis

Reporting and Documentation

• Writing forensic reports

• Presenting findings for legal and corporate use

Case Studies

Summary and Conclusion