Digital Forensics

Course Group: 
Cyber Security

This course will introduce participants to digital forensic analysis and investigation first principles. Students will be introduced to theoretical concepts including the digital forensic method, intent and its application. The course will also cover introductory Microsoft Windows centric technical topics such as file system, memory and operating system artefact analysis using contemporary open source tools, techniques and procedures. Students will be expected to demonstrate both their theoretical and technical understanding through the completion of practical exercises in a simulated operational environment.

Topics covered:

  1. Disk Forensics
  2. Registry Forensics
  3. Network Forensics
  4. Memory Forensics
  5. The Forensic Method

Who Should Attend?

Course Outline

Presenter Background

Dates & Registration

Duration: 5 Days

Delivery Mode: Classroom

Location: Canberra

In-house: Contact the  for more information and to arrange a quote. Recommended for groups of 10 or more.

What you will receive:

  • Comprehensive set of course notes.
  • UNSW Certificate of attendance/attainment.*
  • Morning tea, lunch and afternoon tea.

Masters Credit: 72 hours (12 working days) of approved short course training (plus an assessment) can be credited as an unspecified elective on our Masters of Cyber Security / Cyber Security Operations.

*pending final results


The intended audience for this course are students that have no previous experience or exposure to the field of digital forensics. As a result, students should expect the course material to be introductory and all inclusive, with no digital forensic pre reading required.



On completion of this course, participants should be able to:

  • Understand basic digital forensic theory, including purpose and intent
  • Understand how to professionally approach a digital forensic investigation, determining both its scope and duration
  • Demonstrate they can utilise contemporary open source tools, techniques and procedures to conduct analysis
  • Demonstrate they can achieve an acceptable level of intelligence outcomes within a defined period of time
  • Perform a basic forensic examination, producing an actionable intelligence product


UNSW Canberra Cyber is a focal point for the research of some 60 scholars from various faculties across UNSW who conduct research work on different aspects of cyber security. The Centre is based in Canberra at the Defence Force Academy that provides both advanced research as well as undergraduate and graduate education on cyber security. UNSW Canberra Cyber brings together the biggest concentration of research and tertiary education for the multi-disciplinary study of cyber security in any single university in the Southern hemisphere. A number of UNSW Canberra Cyber scholars, in areas ranging from information technology and engineering to law and politics, have significant international reputations for their work. 

No dates? Or unable to attend dates shown? Submit an Expression of Interest below to be notified of upcoming courses.