EdX

Computer Forensics (edX)

Computer Forensics (edX)

Learn the process, techniques and tools for performing a digital forensics investigation to obtain data related to computer crimes. Digital forensics involves the investigation of computer-related crimes with the goal of obtaining evidence to be presented in a court of law.

Class Deals by MOOC List - Click here and see EdX's Active Discounts, Deals, and Promo Codes.

In this course, you will learn the principles and techniques for digital forensics investigation and the spectrum of available computer forensics tools. You will learn about core forensics procedures to ensure court admissibility of evidence, as well as the legal and ethical implications. You will learn how to perform a forensic investigation on both Unix/Linux and Windows systems with different file systems. You will also be guided through forensic procedures and review and analyze forensics reports.
This offering is part of the RITx Cybersecurity MicroMasters Program that prepares students to enter and advance in the field of computing security.

What you'll learn

  • Court admissibility investigative procedures
  • Attributes of various Windows and Unix/Linux file systems and file recovery processes
  • To identify and apply appropriate forensics tools to acquire, preserve and analyze system image
  • Review and critique a forensics report

Syllabus

Week 1: Digital Forensics Fundamentals
Introduction to Incident response digital forensics four-step procedure
Concepts: computer/network/Internet forensic and anti-forensics

Week 2: Unix/Linux fundamentals
Unix/Linux incident response tools
Unix/Linux file systems (Ext2/Ext3)

Week 3: Unix/Linux Forensic Investigation
Unix/Linux forensics investigation steps and technologies
Unix/Linux forensics case studies

Week 4: Windows Incident Response
Memory forensics
Windows incident response tools

Week 5: Windows fundamentals
Windows file systems
Windows forensics tools

Week 6: Windows Forensic Investigation
Windows acquisition
Windows forensics analysis – registry and other artifacts

Week 7: Advanced artifacts
Loadable kernel module rootkits
Steganography hiding, detection and analysis

Week 8: Review and Everything Together

Go to Class
MOOC List is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

Related Courses

Real-Time Embedded Systems Concepts and Practices (Coursera) Coursera
University of Colorado Boulder

Real-Time Embedded Systems Concepts and Practices (Coursera)

This course can also be taken for academic credit as ECEA 5315, part of CU Boulder’s Master of Science in Electrical Engineering degree. Course Description: In this course, students will design and build a microprocessor-based embedded system application using a real-time operating system or RT POSIX extensions with Embedded Linux. The course focus is on the process as well as fundamentals of integrating microprocessor-based embedded system elements for digital command and control of typical embedded hardware systems.

Jun 22nd 2026
4 Weeks
Personal Identification in Forensics: Current Problems and Trends (edX) EdX
RUDN University,RUDNx

Personal Identification in Forensics: Current Problems and Trends (edX)

The objectives of the course are to acquire special theoretical and practical knowledge in the field of forensic medicine and medical criminology related to modern problems of forensic personal identification. The course includes practical master classes, as well as exclusive video interviews with leading scientists in the field of forensic medicine.

Self Paced
Self-Paced
Introduction to Kubernetes (edX) EdX
Linux Foundation,LinuxFoundationX

Introduction to Kubernetes (edX)

Want to learn Kubernetes? Get an in-depth primer on this powerful system for managing containerized applications. Is your team beginning to use Kubernetes for container orchestration? Do you need guidelines on how to start transforming your organization with Kubernetes and cloud native patterns? Would you like to simplify software container orchestration and find a way to grow your use of Kubernetes without adding infrastructure complexity? Then this is the course for you!

Self Paced
Self-Paced
Forensic Engineering: Learning from Failures (edX) EdX
Delft University of Technology,DelftX

Forensic Engineering: Learning from Failures (edX)

Don’t let good failures go to waste! Identify the causes of failure and use this knowledge to enhance safety and improve performance. What do collapsed buildings, infected hospital patients, and crashed airplanes have in common? If you know the causes of these events and conditions, they can all be prevented. In this course, you will learn how to use the TU Delft mind-set to investigate the causes of such events so you can prevent them in the future.

Self Paced
Self-Paced
Linux System Administration with IBM Power Systems (Coursera) Coursera
IBM

Linux System Administration with IBM Power Systems (Coursera)

This course introduces administrative tasks that a system administrator can perform with Linux hosted on IBM Power servers. This includes virtualization concepts such as logical partitioning, installation of Linux, command-line operations, and more interesting administration and device management tasks. This course includes hands-on exercises with systems from an IBM data center.

Jun 22nd 2026
4 Weeks
Fundamentos de Ciberseguridad: un enfoque práctico (edX) EdX
Inter-American Development Bank - IDB,Universidad Carlos III de Madrid - UC3M,IDBx,UC3Mx

Fundamentos de Ciberseguridad: un enfoque práctico (edX)

Aprende a pensar como un hacker, pero actúa como un experto en ciberseguridad. ¿Has oído hablar de los ataques que reciben las grandes compañías o los bancos a través de sus sistemas informáticos? ¿Sabes detectar un archivo infectado por un virus? O ¿conoces medidas de seguridad para proteger un equipo o una red de ciber-ataques?

Self Paced
Self-Paced
Unix Tools: Data, Software and Production Engineering (edX) EdX
Delft University of Technology,DelftX

Unix Tools: Data, Software and Production Engineering (edX)

Grow from being a Unix novice to Unix wizard status! Process big data, analyze software code, run DevOps tasks and excel in your everyday job through the amazing power of the Unix shell and command-line tools. Processing information is the hallmark of all modern organizations, which are increasingly digital: absorbing, processing and generating information is a key element of their business.

Self Paced
Self-Paced
Introduction to Linux (edX) EdX
Linux Foundation,LinuxFoundationX

Introduction to Linux (edX)

Never learned Linux? Want a refresh? Develop a good working knowledge of Linux using both the graphical interface and command line across the major Linux distribution families. Develop a good working knowledge of Linux using both the graphical interface and command line, covering the major Linux distribution families.

Self Paced
Self-Paced
操作系统原理 (Operating Systems) (Coursera) Coursera
Peking University

操作系统原理 (Operating Systems) (Coursera)

操作系统原理》是针对计算机科学技术专业三年级本科生开设的一门专业基础课程。本课程着重学生系统观的培养,通过重点讲述操作系统的内部结构、工作原理及典型技术的实现,使学生建立起对操作系统的整体及各个功能模块的认识,从而系统掌握计算机的专业知识,进一步提升学生的软件开发能力乃至系统软件开发能力。

Jun 22nd 2026
13-24 Weeks
DevOps: Foundations and tools (edX) EdX
Universidad Anáhuac,AnahuacX

DevOps: Foundations and tools (edX)

Learn essential Linux & Unix to efficiently manage applications from the command line. Meet the basics of source code management with Git and Github. Also, go over the pillars of DevOps like Continuous Integration/Continuous Deployment, the paradigm shift in systems management with Infrastructure as Code and the creation of containers to assure the CI/CD pipeline.

Self Paced
Self-Paced
Sistemas Operacionais e Você: Tornando-se um Usuário Avançado (Coursera) Coursera
Google

Sistemas Operacionais e Você: Tornando-se um Usuário Avançado (Coursera)

Neste curso – com uma combinação de palestras em vídeo, demonstrações e atividades práticas – você conhecerá os principais componentes de um sistema operacional e verá como executar tarefas críticas, como gerenciamento de software e usuários, e configuração de hardware. Vamos terminar com um exemplo de como esse conteúdo pode acabar surgindo em uma entrevista.

Jun 22nd 2026
5-12 Weeks