Introduction to evidence collection Course

A look at the basics of evidence collection and its needs.

13 minutes

Course description

Digital forensics investigations are a common part of ransomware mitigation because evidence may be needed for mitigation, legal action and insurance claims. This course describes the importance of properly collecting digital evidence when investigating a malware infection and demonstrates methods for collecting evidence from virtualized and physical computers.


Evidence collection from a physical machine

Video - 00:03:00

Demonstrates how to collect digital evidence from a physical host machine without compromising the integrity of the collected evidence.
Evidence collection from a virtual machine

Video - 00:02:00

Demonstrates the collection of digital evidence from a virtual machine by converting a snapshot of that virtual machine for analysis.
Collecting forensic evidence

Video - 00:07:00

Discusses the importance of collecting digital evidence for a ransomware investigation and best practices for doing so.
Overview of evidence collection

Video - 00:01:00

A simple overview of what you will learn in Course 2.
Introduction to evidence collection assessment

Assessment - 6 questions

Unlock 7 days of free training

  • 1,400+ hands-on courses and labs
  • Certification practice exams
  • Skill assessments

Plans & pricing

Infosec Skills Personal

$299 / year

  • 190+ role-guided learning paths (e.g., Ethical Hacking, Threat Hunting)
  • 100s of hands-on labs in cloud-hosted cyber ranges
  • Custom certification practice exams (e.g., CISSP, Security+)
  • Skill assessments
  • Infosec peer community support

Infosec Skills Teams

$799 per license / year

  • Team administration and reporting
  • Dedicated client success manager
  • Single sign-on (SSO)
    Easily authenticate and manage your learners by connecting to any identity provider that supports the SAML 2.0 standard.
  • Integrations via API
    Retrieve training performance and engagement metrics and integrate learner data into your existing LMS or HRS.
  • 190+ role-guided learning paths and assessments (e.g., Incident Response)
  • 100s of hands-on labs in cloud-hosted cyber ranges
  • Create and assign custom learning paths
  • Custom certification practice exams (e.g., CISSP, CISA)
  • Optional upgrade: Guarantee team certification with live boot camps

Learn about scholarships and financing with

Affirm logo

Award-winning training you can trust