About this Event
Digital forensics is a critical skill for cybersecurity professionals, investigators, and technologists who want to understand what happened after an incident occurs. This class provides a practical, beginner-friendly introduction to digital forensics, with a strong emphasis on deadbox forensics, the analysis of powered-off systems and storage media.
The course will primarily focus on PC forensics, covering common Windows artifacts, file systems, and investigative techniques. In addition, students will receive a high-level overview of live forensics, including when and why live analysis is performed, as well as a survey of forensic considerations across other platforms such as macOS and Linux.
Topics include:
- What digital forensics is (and is not)
- Deadbox vs. live forensics: use cases and tradeoffs
- Evidence handling and forensic soundness
- Disk images, file systems, and artifacts
- Common forensic tools and workflows
- Platform differences and investigative mindset
Prerequisites:
- Some experience with internal PC hardware and storage devices
- Familiarity with operating systems is helpful but not required
What to Bring:
- Laptop (Windows preferred, but not required)
- Curiosity and a willingness to think like an investigator
Skill Level:
- Beginner to early intermediate
Tags / Categories: Digital Forensics, Cybersecurity, Incident Response, Blue Team, Windows, PC Forensics, Security Fundamentals
Event Venue & Nearby Stays
Hackers Guild PGH, 2247 Babcock Boulevard, Pittsburgh, United States
USD 0.00
