bolt Elite Certification

Digital Forensics

An advanced, 12-week, hands-on course in digital forensics. Trainees investigate cybercrimes, recover digital evidence, and present findings under Pakistani legal procedures, using KP case scenarios.

Duration 12 weeks
Contact Hours 144 Hrs
Level Advanced
Format Full time
AWKUM
Enroll in Program Browse Courses
Digital Forensics

Course Introduction

This course gives learners practical skills in investigating cybercrimes, data breaches, and digital evidence recovery within Pakistan's legal framework (PECA 2016 and the Evidence Act). Trainees master industry tools through KP case scenarios, such as fake mobile banking apps, social media impersonation, and phishing emails aimed at universities. Sessions are about 80% hands-on and include "Break & Fix" error-positive labs. An "Ethics Check" runs through every technical module, and offline "Lab-in-a-Box" kits support areas with poor connectivity. It prepares learners for these roles: Digital Forensics Analyst Incident Responder Cybercrime Investigator Freelancer in fraud and data recovery It also aligns with the GCFA, CHFI, and EnCase certifications.

Learning Outcomes

psychology

Apply digital forensics principles within Pakistan's legal framework (PECA 2016, Evidence Act) and maintain chain of custody

science

Perform forensic imaging, live memory capture, and data carving with open-source and commercial tools

hub

Analyze Windows, Linux, Android, and cloud artifacts in common KP cybercrime scenarios

code

Use Autopsy, FTK Imager, Volatility, Wireshark, and MOBILedit through scaffolded labs

science

Investigate emails, logs, malware, and network intrusions using local datasets

forum

Document findings professionally and present evidence in simulated court scenarios

rocket_launch

Build a forensics portfolio of KP case studies for freelancing or employment

rocket_launch

Prepare for GCFA, CHFI, and EnCase certifications with practice exams

Target Audience

  • group ICT graduates
  • group Early-career cybersecurity professionals
  • group Freelancers interested in cybercrime analysis
  • group Learners aiming for law enforcement or CERT roles (such as FIA and CERT-PK)
  • group Learners with a basic understanding of operating systems, file systems, and networking
  • group Women (the curriculum includes women's-safety scenarios and female mentors)

Certification Criteria

  • check Minimum 80% attendance
  • check Completion of all practical assignments
  • check Minimum 60% overall score
  • check Successful capstone defence
Assessment Strategy
Practical Assignments 25%
Quizzes & Exercises 20%
Final Evaluation (written exam) 15%
Capstone Project (panel review) 40%
Enroll in Program

12 weeks Duration.

Course Modules

12 modules · 4 sessions per week · 144 contact hours

01

Computer Forensics Fundamentals

PECA 2016, forensic readiness, chain of custody, digital evidence, forensic workstation (Week 1)

02

Forensic Investigation Process

Pre-investigation, investigation, and post-investigation phases across evidence and acquisition sessions (Weeks 1–2)

03

Hard Disks & File Systems

NTFS, FAT, EXT4, MBR/GPT, file carving, metadata and timeline analysis (Week 2)

04

Data Acquisition & Duplication

Live, static, logical, and physical acquisition; E01, RAW, and AFF formats; hash verification (Week 2)

05

Defeating Anti-Forensics

Obfuscation, encryption, steganography, ethical decryption, countermeasures (Week 7)

06

Windows Forensics

Registry, prefetch, event logs, MFT, browser forensics (Weeks 3–4)

07

Linux & Mac Forensics

Bash history, Sleuth Kit, memory forensics with Volatility, Mac specifics (Weeks 3–4)

08

Network Forensics

Packet capture, log correlation, IoCs, cloud logs (AWS, Google, Microsoft 365) (Week 6)

09

Investigating Web Attacks

IIS and Apache logs, SQL injection, XSS, Windows server attacks (Week 8)

10

Dark Web Forensics

Tor Browser artifacts, onion services, investigation methodology (Week 8)

11

Investigating Email Crimes

Email headers, MBOX/PST, phishing investigation (Week 4)

12

Malware Forensics

Static and dynamic analysis, malicious documents, sandboxing, network behavior (Weeks 7 and 9)

Forensic Tools

Stack

Acquisition & Disk Analysis: FTK Imager, dd, Guymager, Autopsy, TestDisk, PhotoRec, Sleuth Kit, ExifTool

Stack

Windows, Memory & Email: Registry Explorer, MFT Parser, Event Log Explorer, Volatility, Rekall, MBOX Viewer, eMailTrackerPro, Hindsight

Stack

Mobile Forensics: MOBILedit, ADB, DB Browser, iMazing, iExplorer

Stack

Network, Web & Cloud: Wireshark, TCPDump, NetworkMiner, Kibana, Splunk (demo), Burp Suite, OWASP ZAP, AWS CloudTrail, Google Admin Console

Stack

Malware & Anti-Forensics: PEStudio, YARA, Cuckoo Sandbox, oletools, INetSim, Steghide, Binwalk, VeraCrypt, Hashcat (demo)

Stack

Delivery & Careers: VirtualBox, Excel, LMS, Upwork, Fiverr, LinkedIn

rocket_launch Capstone Project

Hands-On Industry Capstone Project

Apply what you master into a comprehensive, real-world portfolio project evaluated by industry professionals.

assignment
Portfolio Challenge

Project Scope & Problem Statement

Trainees pick a KP-relevant cybercrime scenario and run a full investigation using multiple modules. They acquire and document evidence, analyze artifacts, reconstruct a timeline, write an investigation report, and present it to a panel in Week 12. Themes include a Fake University Admission Scam, Social Media Impersonation, Fake Mobile Banking App, E-commerce Data Breach, Freelancer Account Hijacking, Patient Data Leak at a Clinic, Dark Web Listing Investigation, Malicious Document Attack on an NGO, and Web Attack on a Local Portal.

verified

Required Deliverables & Key Outcomes

check_circle

Case file with acquired evidence and chain of custody

check_circle

Artifact analysis with screenshots and notes

check_circle

Multi-source visual timeline

check_circle

Investigation report with executive summary, methodology, findings, and conclusions

check_circle

Mock testimony and peer review

check_circle

Live capstone presentation (10 minutes, with a tool demo)

Ready to lead the Digital Revolution?

Join the next cohort and master the technologies shaping the future of global enterprise.

Start Your Application Check Eligibility