Digital Forensics and Incident Response (DFIR) Courses Curriculum & Details

Course Curriculum

•   DFIR Fundamentals

  •    Introduction to digital forensics and incident response
  •    Key concepts in DFIR
  •    Tools of the trade
  •    Legal and ethical considerations in DFIR
  •    Collaboration and communication skills for incident response teams
  •    Basic lab practice

•   Digital Evidence and Chain of Custody

  •    Introduction to digital evidence handling
  •    Origin and sources of digital evidence
  •    Best practices to ensure chain of custody
  •    Locard’s Exchange Principle
  •    Types of and methodologies of digital evidence analysis
  •    Practical Labs Practice

  Incident Response, Disaster Recovery, and Risk Management

•         Introduction to Incident Handling
•         Business Continuity and Risk Analysis
•         Developing an incident response plan and playbook
•         Simulated incident response scenarios and tabletop exercises




  Phishing Analysis

•         Phishing email analysis
•         Identifying phishing emails
•         Analyzing email headers and malicious attachments
•         Phishing simulation
•         Practical Labs Practice




  Threat Intelligence

•         Introduction to threat intelligence
•         Threat intelligence sources and its role in DFIR
•         Indicators of Compromise (IOCs) and how they are used in threat detection (IP addresses, domain names, hashes, etc)
•         Threat Actor Profiling, APTs
•         Practical Labs Practice




  Malware Analysis

•         Introduction to malware types
•         Malware types and classification
•         Static and dynamic malware analysis
•         Malware evasion techniques
•         Sandbox types and analysis
•         Practical Labs Practice




  Security Information and Event Management (SIEM)

•         Introduction to SIEM platforms
•         Implementing and using SIEM tools for log analysis
•         Introduction to Splunk and ETK
•         Log Collection and Management
•         Practical Labs Practice




  Preparing and presenting investigative findings

•         Methods of documentation
•         Heisenberg principle analogon
•         Practical Scenario




  Final Capstone Project