<p>This course will be an overview of:</p> <ul> <li>Evidence-preservation fundamentals, including scene security, cloud holds, and the order of volatility, ensuring data integrity before acquisition</li> <li>Acquisition methodologies such as bit-level imaging, RAM capture, and targeted disk extraction, with emphasis on validated tools and cryptographic verification</li> <li>Post-acquisition workflows&mdash;artifact recovery, deep-dive analysis, and compliance documentation&mdash;to translate raw data into courtroom-ready findings</li> <li>Advanced concealment challenges, covering steganography and encryption detection techniques, and the legal considerations that govern their investigative use</li> </ul>