IT Professional Curricula     Internet and Network Technologies Solution Area     Security Solutions     CompTIA CASP+ (CAS-004)

---

Gathering digital evidence for use in a court of law is done using very specific techniques. In this course, you'll learn to recognize the process by which hardware and software digital forensic tools are used to acquire and analyze evidence. Next, you'll learn to work with file system hashing and forensic disk image acquisition including creating and hashing a Linux disk image. You’ll also explore how to use FTK imager to acquire a forensic disk image. Lastly, you'll explore how to retrieve Android device information using the Android Debug Bridge and hide messages using steganography. This course is one of a collection of courses that prepares learners for the CompTIA Advanced Security Practitioner (CASP+) CAS-004 exam.

---

---

Objectives

CompTIA CASP+ (CAS-004): Digital Forensics discover the key concepts covered in this course describe the correct process by which digital forensic evidence is acquired and handled list common digital forensic tools create and hash a Linux disk image use FTK imager to acquire a forensic disk image retrieve Android device information through Android Debug Bridge (ADB) hide messages using steganography summarize the key concepts covered in this course