NDG Forensics v2

Cybersecurity Intermediate 32 hours

Overview

NDG Forensics v2 labs provide hands-on experience conducting a variety of forensics practices. These skills can help prepare trainees for a variety of IT positions, including: Computer Forensic Analyst, Digital Forensic Examiner, Digital Forensics Incident Response, and Security Administrator.

What You Will Learn

  • Create and verify forensic disk images using industry-standard tools
  • Perform registry and file system forensic analysis
  • Recover and carve deleted data from storage media
  • Analyze email, browser, and metadata artifacts for digital evidence
  • Document chain of custody for forensic investigations

Best For

  • Learners pursuing careers as computer forensic analysts or digital forensic examiners
  • Cybersecurity professionals who need to conduct incident response investigations
  • Law enforcement or legal professionals learning digital evidence handling
  • IT administrators responsible for forensic readiness and data recovery

Prerequisites

  • Basic familiarity with Windows and Linux operating systems
  • Understanding of file systems and storage concepts
  • No prior forensics experience required
Lab Exercises (21 labs)
# Title
1 Creating a Forensic Image
2 Live Acquisition
3 Live Forensics
4 Registry Forensics
5 File Systems
6 Keyword Search and Analysis
7 Data Carving
8 Metadata and Link File Analysis
9 Recycle Bin Forensics
10 Steganography and Alternative Data Streams
11 Picture File Analysis
12 Email Analysis
13 Internet Browser Forensics
14 Timeline Analysis
15 IoT Forensics
16 Mobile Forensic Analysis
17 Log Capturing and Interpretation
18 Pagefile Analysis
19 Password Cracking
20 File Hashing and Hash Analysis
21 Chain of Custody
Pod Topology NDG Forensics v2 Pod
NDG Forensics v2 Pod

Virtual Machines

CAINE CSI-Linux DEFT WinOS

Documentation & Resources

Setup: Install NDG Forensics - v2 via the Course Manager. See the Admin Guide →

Previous Versions

Related Labs

Palette (preview)