Collect, preserve and analyze disk, memory and log evidence in hands-on labs, and document your work so your findings hold up.
What you’ll do
- Acquire and preserve evidence without changing it
- Analyze disk images, memory captures and logs
- Build a timeline of what happened
- Document chain of custody and findings
Part of the SOC Analyst track, aligned with the DoD 8140 work role Cyber Defense Forensics Analyst (212). Includes CompTIA CySA+ exam prep, a certification DoD 8140 accepts for that work role at the Advanced level.
Course facts
- Level: Elective on the SOC Analyst track
- Lab: hands-on forensics labs with disk, memory and log evidence
- Exam prep included: CompTIA CySA+
- Certificate: 26 CPE hours, verifiable at cover6solutions.com/verify
- Who it’s for: SOC analysts and incident responders who need evidence that holds up
- Before you start: SOC Analyst Prep Labs, or equivalent SOC experience
Taught by practitioners who do this work every day.
Questions? Email info@cover6solutions.com.

Reviews
There are no reviews yet.