Forensic Process & Chain of Custody
This lesson is part of the course
Buy the course once for $9.99 to unlock every lesson and lab, the final exam and the certificate – lifetime access, no subscription.
Lessons in this course
- Mobile DFIR — Why Phones Are the Crime Scene Locked
- Forensic Process & Chain of Custody Locked
- Android Acquisition — Logical & Filesystem Locked
- iOS Acquisition & Backups Locked
- App Data Artifacts — SQLite, Plists & SharedPrefs Locked
- Timeline Building Locked
- Deleted-Data Recovery Concepts Locked
- Cloud & iCloud Artifacts Locked
- Incident Response on a Compromised Device Locked
- Reporting — From Artifacts to Conclusions Locked
- Capstone — Run a Full Mobile Investigation Locked