• Define key terms in digital forensics and incident response
• Describe the U.S. NIST incident response lifecycle
• Apply standard methodologies to artifact collection
• Explain proper evidence handling techniques and chain of custody procedures
• Identify key artifacts and their importance in forensics analysis
• Apply the MITRE ATT&CK framework to DFIR objectives

•  Course Introduction
•  Malware Overview
•  Malware Lab Construction
•  Analysis Techniques
•  Network Analysis
•  Delivery Vectors
•  Executables
•  Defensive Techniques of Malware
•  Modern OS Defenses

This course is intended for incident responders, information security staff, auditors, SOC analysts, investigators, and consultants responsible for digital forensics and incident response.

Students taking this course should have a working knowledge of Windows/Linux/macOS operating systems, and network technologies. Basic understanding of information security, command line syntax, malware, and analytical thinking recommended.