Forensics

COURSE SYLLABUS

Introduction to Digital Forensics: Chain of custody, evidence lifecycle, forensic roles
Data Acquisition, File Data, and Metadata: Disk acquisition techniques, filesystem analysis, metadata and artifact extraction, hashing, etc.
Windows Native Artifacts 1: Windows Artifacts: Prefetch, Registry, Event Logs, LNK, Jumplist, etc.
Windows Native Artifacts 2: Windows Artifacts: Prefetch, Registry, Event Logs, LNK, Jumplist, etc.
Web Browser Artifacts: Chrome and Firefox Artifacts: History, Downloads, Bookmarks, etc.
Advanced Forensic Concepts: Cloud, Mobile, IoT and other advanced concepts
SOC Fundamentals: SOC structure, L1–L3 responsibilities, tooling overview
SIEM Operations and Alert Triage: SIEM architecture, log ingestion, initial alert handling
Incident Response 1: IR lifecycle, Collection and Analysis of Triage Image
Incident Response 2: Memory Acquisition and Analysis
Threat Intelligence and CTI: CTI lifecycle, MISP, threat actor profiling
Threat Hunting and Detection Engineering: Hypothesis-driven hunting, ATT&CK mapping, detection rule development
AI in Cyberdefence and SOC Automation: AI for alert triage, phishing detection, etc.

The Master of Science Programme in "Advanced Cybersecurity Technologies and Governance" was established as part of the European EU-iNSPIRE project (INnovative multi-diSciPlinary Industry-focused cybersecurity education for upskilling and ReskIlling the EU workforcE), which began in January 2025, has a duration of four (4) years and is co-funded by the European Union through the DIGITAL-2023-SKILLS-05 program (Contract No. 101190054).