Introduction to Digital Forensics: Deadbox Analysis & PC Focus

Digital forensics is a critical skill for cybersecurity professionals, investigators, and technologists who want to understand what happened after an incident occurs. This class provides a practical, beginner-friendly introduction to digital forensics, with a strong emphasis on deadbox forensics, the analysis of powered-off systems and storage media.

The course will primarily focus on PC forensics, covering common Windows artifacts, file systems, and investigative techniques. In addition, students will receive a high-level overview of live forensics, including when and why live analysis is performed, as well as a survey of forensic considerations across other platforms such as macOS and Linux.

Topics include:

• What digital forensics is (and is not)
• Deadbox vs. live forensics: use cases and tradeoffs
• Evidence handling and forensic soundness
• Disk images, file systems, and artifacts
• Common forensic tools and workflows
• Platform differences and investigative mindset
  

Prerequisites:

• Some experience with internal PC hardware and storage devices
• Familiarity with operating systems is helpful but not required
  

What to Bring:

• Laptop (Windows preferred, but not required)
• Curiosity and a willingness to think like an investigator
  

Skill Level:

• Beginner to early intermediate
  

Tags / Categories: Digital Forensics, Cybersecurity, Incident Response, Blue Team, Windows, PC Forensics, Security Fundamentals

Know what’s Happening Next — before everyone else does.

Get App

Host or Publisher Hackers Guild PGH