Membership

DFIR in AWS (W63)

Develop a practical approach to digital forensics and incident response in AWS. Work through cloud evidence sources and investigation workflows while building an understanding of AWS-specific forensic challenges. Intended audience: Who is this course for? This course is designed for anyone interested in cloud forensics and Incident Response. Whether you are a student or a working professional, this course offers valuable insights and learning opportunities.

Instructor · Afshan Naqvi

Modules:
6
Lessons:
18

eForensics learning

Practical skills.
Verified progress.

What you'll learn

  • Set up an AWS environment for forensic investigation.
  • Collect and analyze cloud evidence using forensic tools.
  • Apply an incident-response workflow to AWS security events.

Prerequisites

This course is not designed for complete beginners. Prior to enrollment, it is recommended that students possess: Familiarity with AWS services such as S3, EC2, RDS, etc. Basic knowledge of Python, Lambda, and CloudFormation. Basic understanding of the Linux/Unix command-line interface. Equipment and software: To take the course, students will need the following hardware and software: A computer with internet access A web browser An AWS account (or access to one) COURSE SYLLABUS Module 0: Before the course In the course introduction, we'll cover: Overview: Briefly outline what the course entails, learning objectives, and expectations. Outcomes: Clearly define post-course objectives and what students can achieve. Instructor Introduction: Introduce myself, my background, and qualifications. Prerequisites: Outline course requirements and expectations. Structure: Explain the module, lesson, and assessment format. Content: Provide an overview of covered topics and lesson formats. Module 1: Digital Forensics Foundations This module provides a foundational overview of key concepts in AWS Digital Forensic. Introduction to Digital Forensics in Cloud Environments. Basics of Preserving Digital Evidence. Chain of Custody in AWS Forensic Investigations.

Module 7

FINAL EXAM

Lessons will appear here after course content is added.

Assessments

Quiz Required

(W63Q01) FINAL EXAM

Course access

Unlock DFIR in AWS (W63).

Enter your email. We’ll send a sign-in code here without taking you away from this course.