This course introduces you to the principles and practices of digital forensics in cybersecurity including cyber incident response, and investigative analysis. You will learn how to identify, acquire, preserve, and analyse digital evidence from various sources such as hard drives, mobile devices, and network traffic. Using industry tools, you will conduct investigations, generate forensic reports, interpret and present findings in formats suitable for legal or corporate proceedings. Key topics include file systems, metadata analysis, chain of custody, and incident response. Emphasis is placed on adhering to legal and ethical standards in digital investigations. This course is a core course in the Cyber Security Operations Major.