Digital Forensics Incident Response

Catalog description

This course will introduce you to the fundamentals of incident response (IR), which sometimes includes digital forensic investigations. We will cover all types of incidents, from a stolen laptop to nation state cyber attacks to ransomware. Students will initially learn about the role of incident response in organization, its links to the security operations center (SOC) and its relationships with risk, compliance, legal and data privacy personnel. This course will highlight relevant digital forensic artifacts, including client computers, servers, the enterprise network, and Cloud storage. Students will gain hands-on experience with digital forensics and IR tools. The course will also detail the reporting requirements associated with data breaches. Furthermore, we will discuss best practices and protocols for responding to, and documenting incidents.