Get in Touch

Course Outline

Computer forensics facilitates the systematic and meticulous identification of evidence in cases involving computer-related crimes and misuse. Applications range from tracking hacker activity through a client's infrastructure to identifying the source of defamatory communications or recovering indicators of financial fraud.

Module 1: Introduction

Module 2: Computer Forensic Incidents

Module 3: Investigation Process

Module 4: Disk Storage Concepts

Module 5: Digital Acquisition & Analysis

Module 6: Forensic Examination Protocols

Module 7: Digital Evidence Protocols

Module 8: CFI Theory

Module 9: Digital Evidence Presentation

Module 10: Computer Forensic Laboratory Protocols

Module 11: Computer Forensic Processing Techniques

Module 12: Digital Forensics Reporting

Module 13: Specialized Artifact Recovery

Module 14: e-Discovery and ESI

Module 15: Mobile Device Forensics

Module 16: USB Forensics

Module 17: Incident Handling

Mile2 - Lab 1: Preparing Forensic Workstation

  • Installation of AccessData FTK Imager
  • Installation of Autopsy
  • Configuring National Software Reference Library (NSRL) for Autopsy
  • Installation of 7z
  • Installing Registry Viewer
  • Installing Password Recovery Tool Kit (PRTK – 5.21)

Lab 2: Chain of Custody

  • Chain of Custody procedures for search and seizure
  • Chain of Custody management during forensic imaging

Lab 3: Imaging Case Evidence / FTK Imager

Lab 4: Creating a New Case in Autopsy

  • Setting up a Case in Autopsy

Lab 5: Examining Evidence / Autopsy (Case #1)

  • Investigation of user MTBG attempting unauthorized access to former employer's systems
  • Analyzing evidence using Autopsy

Case Study scenario:

  • Identification of required evidence (Challenge)

Final Report for MTBG case

Lab 6: Examining Evidence / Autopsy (Case #2)

  • Analysis of the Greg Schardt case

Case Study Scenario:

  • Identification of required evidence (Challenge)
 35 Hours

Need help picking the right course?
southafrica@nobleprog.co.za or +27 (0)10 005 5793

Testimonials (2)

Clarity and pace of explanations

Federica Galeazzi - Aethra Telecomunications SRL
Course - AI-Powered Cybersecurity: Advanced Threat Detection & Response

It did give me the insight what I needed :) I am starting teaching on a BTEC Level 3 qualification and wanted to widen my knowledge in this area.

Otilia Pasareti - Merthyr College
Course - Fundamentals of Corporate Cyber Warfare

Upcoming Courses

CHFI - Certified Digital Forensics Examiner

2026-10-06 09:30
35 hours
Pretoria - Brooklyn Bridge

CHFI - Certified Digital Forensics Examiner

2026-10-20 09:30
35 hours
Cape Town - City Lodge Hotel Victoria and Alfred Waterfront

CHFI - Certified Digital Forensics Examiner

2026-11-03 09:30
35 hours
Johannesburg - City Lodge Waterfall City

CHFI - Certified Digital Forensics Examiner

2026-11-17 09:30
35 hours
Garden Court South Beach

CHFI - Certified Digital Forensics Examiner

2026-12-01 09:30
35 hours
Sheraton Pretoria Hotel

Related Courses

AI-Powered Cybersecurity: Threat Detection & Response

 21 Hours

This instructor-led, live training in South Africa (online or onsite) targets entry-level cybersecurity professionals who want to learn how to utilise AI for enhanced threat detection and response capabilities.

Upon completion of this training, participants will be able to:

  • Gain insight into AI applications within the cybersecurity sector.
  • Deploy AI algorithms for threat detection.
  • Automate incident response using AI tools.
  • Incorporate AI into existing cybersecurity infrastructure.
Read more...

AI-Powered Cybersecurity: Advanced Threat Detection & Response

 28 Hours

This instructor-led, live training is available online or on-site, designed for intermediate to advanced cybersecurity professionals aiming to elevate their skills in AI-driven threat detection and incident response.

Upon completion of this training, participants will be capable of:

  • Implementing advanced AI algorithms for real-time threat detection.
  • Customising AI models to address specific cybersecurity challenges.
  • Developing automation workflows for threat response.
  • Securing AI-driven security tools against adversarial attacks.
Read more...

Blue Team Fundamentals: Security Operations and Analysis

 21 Hours

This instructor-led, live training in South Africa (online or onsite) is aimed at intermediate-level IT security professionals who wish to develop skills in security monitoring, analysis, and response.

By the end of this training, participants will be able to:

  • Understand the role of a Blue Team in cybersecurity operations.
  • Use SIEM tools for security monitoring and log analysis.
  • Detect, analyze, and respond to security incidents.
  • Perform network traffic analysis and threat intelligence gathering.
  • Apply best practices in security operations center (SOC) workflows.
Read more...

Bug Bounty Hunting

 21 Hours
This instructor-led live training in South Africa provides beginners with the core skills for ethical bug hunting, covering essential tools like Burp Suite and common vulnerabilities such as XSS, SQLi, and CSRF. Learners will develop the ability to identify flaws and submit well-documented reports.
Read more...

Bug Bounty: Advanced Techniques and Automation

 21 Hours
This advanced training in South Africa equips security researchers with the skills to automate workflows and expand reconnaissance for bug bounty hunting. Participants will master the detection of high-impact vulnerabilities, develop custom scripts, and manage complex targets efficiently.
Read more...

Certified Incident Handler

 21 Hours
Instructor-led training in South Africa for IT security professionals. Master the skills to plan, classify, contain, and manage incidents through practical simulations. Develop expertise in detection, eradication, and recovery strategies to significantly enhance your organisation’s response capabilities.
Read more...

Mastering Continuous Threat Exposure Management (CTEM)

 28 Hours

This instructor-led, live training in South Africa (online or onsite) is aimed at intermediate-level cybersecurity professionals who wish to implement CTEM in their organisations.

By the end of this training, participants will be able to:

  • Understand the principles and stages of CTEM.
  • Identify and prioritise risks using CTEM methodologies.
  • Integrate CTEM practices into existing security protocols.
  • Utilise tools and technologies for continuous threat management.
  • Develop strategies to validate and improve security measures continuously.
Read more...

Cyber Threat Intelligence

 35 Hours

This instructor-led live training, offered in South Africa (online or onsite), is targeted at advanced-level cybersecurity professionals who wish to understand Cyber Threat Intelligence and gain the skills to effectively manage and mitigate cyber threats.

By the end of this training, participants will be able to:

  • Understand the fundamentals of Cyber Threat Intelligence (CTI).
  • Analyse the current cyber threat landscape.
  • Collect and process intelligence data.
  • Perform advanced threat analysis.
  • Leverage Threat Intelligence Platforms (TIPs) and automate threat intelligence processes.
Read more...

Fundamentals of Corporate Cyber Warfare

 14 Hours

This instructor-led, live training in South Africa (online or onsite) addresses various facets of enterprise security, ranging from AI applications to database protection. It also examines the latest tools, processes, and strategic mindsets essential for defending against attacks. 

Read more...

DeepSeek for Cybersecurity and Threat Detection

 14 Hours

This instructor-led, live training in South Africa (online or onsite) targets intermediate-level cybersecurity professionals eager to leverage DeepSeek for advanced threat detection and automation.

Upon completing this training, participants will be equipped to:

  • Apply DeepSeek AI for real-time threat detection and analysis.
  • Deploy AI-driven techniques for anomaly detection.
  • Automate security monitoring and response processes using DeepSeek.
  • Seamlessly integrate DeepSeek into existing cybersecurity frameworks.
Read more...

Duty Managers Cyber Resilience

 14 Hours

This instructor-led, live training in South Africa (online or onsite) is designed for duty managers and operational leaders at an intermediate level who wish to develop robust cyber resilience strategies to safeguard their organisations against cyber threats.

By the end of this training, participants will be able to:

  • Comprehend the fundamentals of cyber resilience and its application to duty management.
  • Formulate incident response plans to uphold operational continuity.
  • Recognise potential cyber threats and vulnerabilities within their operational environment.
  • Deploy security protocols to reduce risk exposure.
  • Lead team responses during cyber incidents and the subsequent recovery phases.
Read more...

Junior Detection Engineer Essentials

 21 Hours
This instructor-led, live training in South Africa helps beginner-level cybersecurity practitioners master detection engineering. Participants will learn to develop effective rules, interpret logs, apply threat intelligence, and optimize alerts to reduce false positives within a modern SOC workflow.
Read more...

MITRE ATT&CK

 7 Hours

This instructor-led, live training in South Africa (online or onsite) is aimed at information system analysts who wish to use MITRE ATT&CK to decrease the risk of a security compromise.

By the end of this training, participants will be able to:

  • Set up the necessary development environment to start implementing MITRE ATT&CK.
  • Classify how attackers interact with systems.
  • Document adversary behaviors within systems.
  • Track attacks, decipher patterns, and rate defense tools already in place.
Read more...

Open-Source EDR Fundamentals: Deployment, Detection & Response

 14 Hours
Enrol in this instructor-led training in South Africa to gain mastery over OpenEDR fundamentals. Develop skills in deploying agents, configuring telemetry, and analyzing endpoint events for threat detection. Our hands-on labs in South Africa emphasise incident response and the integration of alerts into security workflows.
Read more...

Mastering Open-Source EDR & Mitre ATT&CK for Threat Hunting

 21 Hours
This advanced training in South Africa empowers SOC analysts and threat hunters with the practical skills necessary to deploy OpenEDR and integrate it with MITRE ATT&CK. Learners will acquire the ability to design robust detection logic, execute hunting workflows, and perform root cause analysis to enhance organizational security.
Read more...

Related Categories

Threat Detection and Response (TDR)
Threat Detection and Response (TDR)