Digital Forensics
Skill Path
Digital Forensics is the branch of forensic science that focuses on identifying, acquiring, processing, analyzing, and reporting on data stored electronically. This skill path is designed to provide you with a general understanding of Digital Forensics as both a skill set and work role. Upon completing the skill path, you will earn a Credly digital badge that will demonstrate to employers that you’re ready for the job.
26
H
20
M
Advanced
21000
17
Learners at 96% of Fortune 1000 companies trust Cybrary
.svg){kind=small}
About this Skill Path
Digital Forensics is the branch of forensic science that focuses on identifying, acquiring, processing, analyzing, and reporting on data stored electronically. This skill path is designed to provide you with a general understanding of Digital Forensics as both a skill set and work role.
In this skill path, you will learn the basics of Digital Forensics, including how to acquire and analyze evidence from several of the most common sources, including the Windows Registry, File System, Local User Accounts, and Execution Artifacts, as well as Web Browsers, Email, Deleted Content, and System Memory.
This skill path is designed to expand the investigation and analysis skills required for senior defensive security professionals. Upon completing the skill path, you will earn a Credly digital badge that will demonstrate to employers that you’re ready for the job.
Skills you'll gain
Skill Path Outline
Coming Soon
The Incident Response Skill Path is expected to release in Q2 of 2025. Sign up now to explore our other Incident Response courses and content.
Start Learning for FreeLearn
Learn core concepts and get hands-on with key skills.
Digital Forensics Basics
In this hands-on lab, you will learn the basics of digital forensics, including its role in an investigation and major phases. You will practice using the Autopsy forensics tool to analyze and retrieve evidence from a
Autopsy Basics
In this hands-on lab, you will be introduced to the Autopsy digital forensics tool. You will learn basic tool operations, including the creation of a new case, loading and processing a piece of digital evidence, and navigating the UI.
Evidence Acquisition
In this hands-on lab, you will learn the basics of digital forensic acquisition. You will practice acquiring evidence using two tools: dc3dd and FKT Imager.
File Systems
In this hands-on lab, you will be introduced to file systems from the perspective of digital forensics. You will practice by analyzing a file system to identify important pieces of data regarding files of interest.
Windows Registry Analysis
In this hands-on lab, you will be introduced to the Windows Registry as a critical data source when performing digital forensic analysis of a Windows system. You will practice extracting Registry files from a system image, examining specific data in Registry keys, and cleaning dirty hives.
Windows Local User Accounts
In this hands-on lab, you will learn how to examine local user accounts on Windows systems for forensic evidence. You will practice identifying user accounts and basic configuration details about them.
Windows Execution Artifacts (Part 1)
In this hands-on lab, you will learn to discover and analyze artifacts generated by execution in Windows systems. You will practice identifying evidence of execution under specific conditions and attributing that evidence to user accounts. Part 1 of 2.
Windows Execution Artifacts (Part 2)
In this hands-on lab, you will learn to discover and analyze artifacts generated by execution in Windows systems. You will practice identifying evidence of execution under specific conditions and attributing that evidence to user accounts. Part 2 of 2.
Examining File Operations
In this hands-on lab, you will learn about file operations as a source of evidence in the context of a forensic investigation. You will practice you examining traces of actions performed involving files, such as files being created, modified, moved, opened, etc.
Examining Web Browser Usage
In this hands-on lab, you will learn about web browsers as a source of evidence in the context of a forensic investigation. You will practice examining traces of actions involving the usage of web browsers and associated web browser activity on Windows.
Examining Email Usage
In this hands-on lab, you will learn how to gather and analyze evidence from email within the context of a forensic investigation. You will practice examining traces of actions involving email client usage on Windows
Deleted Content Recovery
In this hands-on lab, you will learn the basics of recovering deleted data within the context of a forensic investigation. You will practice using various tools and data carving techniques to recover deleted data.
Memory Acquisition and Examination
In this hands-on lab, you will learn the basics of memory forensics. You will practice acquiring and examining evidence from system memory on a Windows system.
Practice
Exercise your problem-solving and creative thinking skills with security-centric puzzles
Best Case Scenario
In this challenge, you will practice starting a new case in Autopsy, adding evidence, and executing basic preprocessing.
Acquired Taste
In this hands-on challenge, you will get additional practice acquiring forensic evidence.
Just Browsing
In this hands-on challenge, you will practice examining artifacts of execution and web browsing.
You've Got Mail
In this hands-on challenge, you will practice examining artifacts associated with email usage.
Deleted Scene
In this hands-on challenge, you will practice applying techniques to recover deleted files.
Prove
Assess your knowledge and skills to identify areas for improvement and measure your growth
Digital Forensics Basics
In this hands-on lab, you will learn the basics of digital forensics, including its role in an investigation and major phases. You will practice using the Autopsy forensics tool to analyze and retrieve evidence from a
Train Your Team
Cybrary’s expert-led cybersecurity courses help your team remediate skill gaps and get up-to-date on certifications. Utilize Cybrary to stay ahead of emerging threats and provide team members with clarity on how to learn, grow, and advance their careers within your organization.
Instructors
Instructors
Get Hands-on Learning
Put your skills to the test in virtual labs, challenges, and simulated environments.
Measure Your Progress
Track your skills development from lesson to lesson using the Cybrary Skills Tracker.
.webp)
Connect with the Community
Connect with peers and mentors through our supportive community of cybersecurity professionals.
Success from Our Learners
Frequently Asked Questions
This skill path is intended for learners who wish to expand their defensive security skill set to include Digital Forensics. This includes learners who have previously completed Cybrary's SOC Analyst Career Path, as well as current mid-career IT and defensive security practitioners who are interested in specializing in Digital Forensics. Experienced defensive security practitioners will also benefit from reviewing core concepts and testing their skills in this path's Challenge and Assessment modules.
