1.0 Introduction

In this unit we will focusing on foundation.
Investigation part will not be covered in this unit.

  • Computer Foundation
  1. We will learn how data is stored in storage devices
  2. What is booting process/ what happens when you start the computer/ how a particular OS takes charge of the hardware when we power on the machine
  3. Hard Disk technology, how hard disk works, different components of HDD

  •  Digital Investigation Foundation
  1. What are the useful evidences in digital investigation, what does make them eligible as a digital evidence
  2. Steps involved in investigation
  3. analysis of the acquired data
  4. Available tools for investigations



2.3.2 Essential & Non-essential data