Media Forensics (2020)

From CyberEdWiki
Jump to: navigation, search

The intent of the Media Forensics Knowledge Unit is to provide students with the ability to apply forensics techniques to investigate and analyze a particular media in context.


  1. Students should be able to describe methods and approaches for forensic analysis on specified media.


  1. Drive Acquisition
  2. Authentication of Evidence
    1. Verification and Validation
    2. Hashes
  3. Metadata
  4. Live vs. Static Acquisition
  5. Sparse vs. Full Imaging
  6. Slack Space
  7. Hidden Files/clusters/partitions
  8. (must include hands-on activities)


NICE Framework Categories[edit]

CSEC 2017 Categories[edit]

Specialization Areas[edit]

See also[edit]

Related Knowledge Units

Further reading[edit]

Suggested textbooks[edit]

Suggested academic readings[edit]

Sample knowledge test[edit]

Sample skills test[edit]

Sample abilities test[edit]

Additional notes or materials[edit]


Reference ID[edit]