Digital Forensics & Evidence Handling — The Evidence Staircase

A hands-on mid-level course that turns a suspect system into defensible evidence. Climb the evidence staircase - eight steps from scene to stand: Identify, Preserve, Acquire, Authenticate, Examine, Analyze, Report, and Testify - imaging with write-blockers, proving integrity with hashes, keeping chain of custody, and building a timeline that holds up. Grounded in NIST 800-86 and ISO 27037; lawful and authorized throughout. Four hands-on activities in every lesson.

What you'll learn

• Preserve and acquire evidence in order of volatility without altering it.
• Prove image integrity with hashing and keep an unbroken chain of custody.
• Examine file-system, registry, and memory artifacts and build a sound timeline.
• Write a defensible report and present findings that withstand scrutiny.

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.