Indian Institute of Technology Kanpur

Digital Forensics and Incident Investigation

Indian Institute of Technology Kanpur

Cyber Security

Application Deadline Approaching

Last date to apply: November 13, 2026 · Program starts on November 14, 2026

About Programme

Learn practical digital forensics, cybercrime investigation, incident response and evidence analysis across systems, networks and cloud

Hands on digital forensics training with live weekend sessions led by industry practitioners.
Learn end to end cybercrime investigation, evidence handling and incident investigation techniques.
Work with real forensic concepts across operating systems, networks, databases, cloud and malware analysis.
Batch-wise Course Start Dates - Batch 4: 14th November 2026

What you'll learn

Understand digital forensics principles, cybercrime investigation processes, and legal aspects of evidence handling.
Perform data acquisition, disk analysis, and operating system forensics across Windows, Linux, and Mac.
Investigate network attacks, malware incidents, email crimes, web attacks, and cloud-based incidents.
Create professional forensic reports and present investigation findings with confidence.

Skills you'll gain

Data Acquisition and Disk ForensicsAnti Forensics Detection and AnalysisOperating System Forensics for Windows, Mac and LinuxNetwork, Database and Cloud ForensicsMalware Analysis using Static and Dynamic TechniquesDark Web ForensicsForensics Report Writing and Documentation

Programme Content

Computer Forensics in Today’s World

  • Understanding computer forensics
  • Cyber crime and types of computer crimes
  • Cyber crime investigation
  • Rules of forensic investigation
  • Understanding digital evidence
  • Rules of evidence
  • Forensics readiness

    • Download Full Curriculum

    Computer Forensics Investigation Process

  • Phases of computer forensics investigation
  • Pre-investigation phase
  • Investigation phase
  • Post-investigation phase

    • Download Full Curriculum

    Understanding Hard Disks and File Systems

  • Hard disk drive overview
  • Disk partitions and boot process
  • Understanding file systems
  • RAID storage systems
  • File system analysis

    • Download Full Curriculum

    Data Acquisition and Duplication

  • Data acquisition and duplication concepts
  • Static acquisition
  • Validating data acquisitions

    • Download Full Curriculum

    Defeating Anti-Forensics Techniques

  • Anti-forensics techniques
  • Password protection
  • Recovering deleted partitions
  • Steganography
  • Steganalysis
  • Artifact wiping

    • Download Full Curriculum

    Operating System Forensics – Windows, Mac, and Linux

  • Windows forensics
  • Linux forensics
  • Mac forensics

    • Download Full Curriculum

    Network Forensics

  • Introduction to network forensics
  • Fundamental logging concepts
  • Event correlation concepts
  • Network forensic readiness
  • Network traffic investigation
  • Documenting evidence
  • Evidence reconstruction

    • Download Full Curriculum

    Investigating Web Attacks

  • Web attack investigation
  • Investigating web server logs
  • Tools for locating IP addresses

    • Download Full Curriculum

    Database Forensics

  • MSSQL forensics
  • MySQL forensics

    • Download Full Curriculum

    Cloud Forensics

  • Usage of cloud forensics
  • Stakeholders and their roles
  • Investigating cloud storage services

    • Download Full Curriculum

    Malware Forensics

  • Static malware analysis
  • Dynamic malware analysis
  • Analysis of malicious documents
  • Malware analysis challenges

    • Download Full Curriculum

    Investigating Email Crimes

  • Email systems
  • Email crimes: spamming, phishing, spoofing, mail bombing
  • Steps to investigate email crimes and violations
  • Examining email messages
  • Laws and acts against email crimes

    • Download Full Curriculum

    Mobile Phone and IoT Forensics

  • Mobile forensics process
  • Forensics imaging
  • Jailbreaking and rooting techniques
  • Android forensics analysis

    • Download Full Curriculum

    Dark Web Forensics

  • Dark web forensics
  • Tor browser investigation
  • Checking files

    • Download Full Curriculum

    Forensics Report Writing and Presentation

  • Writing investigation reports
  • Expert witness testimony
  • Deposition
  • Dealing with media

    • Download Full Curriculum

    Program Certificate

    Earn a career certificate

    Add this credential to your LinkedIn profile, resume, or CV. Share it on social media and in your performance review.

    Other programs in this subject area you might find useful

    Same topic, Similar duration - Broader exploration across all institutes

    Contact us for the further details

    Speak with an Advisor

    1. Pedagogy (case method, experiential learning, coaching, simulations)
    2. Target Audience
    3. Programme Objective
    4. Faculty Information
    5. Testimonials
    6. Programme Benefits
    7. Brochure

    Prashansa Uttam

    Programme Advisor

    +91 9403890085contact@echomind.oneMon – Fri, 9am – 5pm IST

    Indian Institute of Technology Kanpur

    Executive Education Office

    NA
    NA
    NA
    https://www.iitk.ac.in
    Kanpur, India

    Tell us about your program enquiry

    Fill out the form below and our team will get back to you within 24 hours.

    Digital Forensics and Incident Investigation | IIT Kanpur