Forensic Analysis Techniques (CyberSuite)

Learn essential forensic analysis techniques, including network, memory, disk, and mobile forensics with this course, designed as part of the CyberSuite project. The CyberSuite project (funded under the DIGITAL Europe Programme of the European Union), aims to bridge market gaps by establishing an easily accessible marketplace for cybersecurity services tailored to SMEs, fostering simplicity and accessibility in high-level security, privacy, and trust.

About this course

This advanced-level course explores key forensic analysis techniques used in cybersecurity investigations. Covering network, memory, disk, and mobile forensics, it equips learners with practical investigative skills to uncover and analyse digital evidence following security incidents.

Participants examine packet capture and traffic analysis using tools such as Wireshark and tcpdump, memory forensics techniques with Volatility, steganography detection methods, disk imaging and file system analysis using tools like Autopsy, and mobile data extraction and analysis.

Learning outcomes

Through structured modules and practical exercises, learners gain hands-on experience in identifying hidden traces, reconstructing attack activity, and preserving digital evidence in accordance with forensic best practices.

By the end of the course, participants will be able to conduct structured forensic investigations across multiple environments, apply forensic tools to analyse compromised systems, and understand the role of digital forensics in incident response and cybercrime investigation.