Digital Forensics

As part of my cybersecurity degree, I completed a comprehensive Digital Forensics course designed to build core competencies in conducting investigations involving digital evidence. This course emphasized both the theoretical foundations and hands-on skills required in modern digital forensics work. It included structured lab environments, readings, and practical assignments to simulate real-world investigative scenarios.

Key Topics and Skills Covered:

  • Introduction to the Digital Forensics Profession: Explored the roles, responsibilities, and ethical considerations of digital forensic investigators.
  • Evidence Handling & Data Acquisition: Learned the principles of evidence preservation, including acquisition from live systems and validation processes.
  • Operating Systems & File Systems: Gained experience working with Windows, Linux, and Macintosh file systems. Explored the Windows registry and command-line interface for forensic purposes.
  • Crime Scene Processing & Investigation: Developed the ability to document, control, and collect digital evidence at a crime or incident scene.
  • Forensic Tools: Used industry-standard tools such as Autopsy and command-line utilities for image recovery and metadata analysis.
  • Mobile & Cloud Forensics: Investigated data from mobile devices and cloud platforms, understanding legal and technical challenges.
  • Email and Social Media Investigations: Performed investigative techniques to recover and analyze communications across digital platforms.
  • Virtual Machines & Network Forensics: Learned live acquisition from virtual environments and analyzed artifacts from network traffic.
  • Reporting and Testimony: Wrote formal forensic reports and learned best practices for delivering expert testimony in legal contexts.

Lab Assignments Included:

  • Processing digital crime scenes
  • Acquiring and validating forensic images
  • Investigating Windows and Linux systems
  • Cloud and mobile forensics
  • Simulated expert witness testimony

Supplemental Learning:

  • Readings on file systems, registry, steganography, metadata, and forensic image handling
  • Instructional videos and visual labs on VM forensics, email analysis, and cloud platforms
  • Continuous assessments through quizzes, discussions, and a midterm exam

This course gave me hands-on experience with forensic processes, from scene acquisition to courtroom testimony preparation. It strengthened my skills in investigation planning, data integrity assurance, evidence presentation, and use of industry tools—preparing me for roles in digital investigations and cybercrime response.

A few of my samples of these labs are below: