1. Data – introduction
Digital data is positioned here as the common subject linking collection, preservation, access, analysis, and reporting. This opening section establishes the overall context of working with information in organizational and technical settings, preparing the ground for later operational topics.
2. Obtaining digital data
Obtaining digital data begins with identifying viable sources, then searching, importing, and handling material without compromising security. The section frames acquisition as a controlled process, so data can be collected efficiently while preserving usability and basic protection requirements.
- where to get data from,
- how to search,
- how to import,
- security.
3. Data securing
Securing digital evidence involves more than copying files, especially when source media, disk protections, or cloud resources are involved. Participants work through cloning, imaging, binary copies, post-mortem acquisition, Triage-based securing, and the role of file formats and tools.
- cloning and imaging of media,
- post-mortem securing,
- file formats,
- binary copies – tools and software,
- securing using the Triage method,
- disk protections,
- data in the cloud.
4. Data analysis
From the first preparation steps to final interpretation, analytical work requires a defined methodology and controlled processing. This part organizes the sequence of analysis, helping participants connect preparation choices with processing logic and the meaning of resulting findings.
- preparation for analysis,
- determination of methodology,
- processing,
- interpretation.
5. Data recovery
When information is missing or damaged, recovery methods differ depending on whether original structure is preserved. The training distinguishes work on structured data from recovery without structure, clarifying the technical implications of each approach and expected limitations.
- with structure,
- without structure.
6. Web browsers
Web browsers leave traces that can matter during examination of digital activity and user behavior. The section covers cookies, browser-related file structures, and private mode, with attention to what these elements reveal and how they affect available data.
- cookies,
- file structure,
- private mode.
7. Data reporting
Effective reporting turns processed information into a form that supports review and decision-making. The focus here is on reporting principles, building reports that match the intended purpose, and presenting results in a clear, structured, and professionally usable way.
- principles,
- creating reports,
- presentation.
8. Data storage and archiving
Long-term retention starts with choosing appropriate data carriers and defining how information is archived in the organization. The section links storage strategy with protection against data loss, showing how retention, accessibility, and resilience must be balanced over time.
- types of data carriers,
- data archiving in organizations,
- long-term data storage strategy,
- protection against data loss.
9. Data access management
Controlling who can view or modify information requires clear roles, permissions, and identity management. Attention is also given to access control mechanisms and monitoring practices that make data usage traceable and help detect unauthorized or excessive access.
- roles and permissions,
- access control,
- monitoring access to data,
- identity management.
10. Data quality management
Reliable datasets depend on disciplined validation, verification, and cleaning before they are used further. This section also addresses master data management and the controls needed to maintain integrity and consistency across records, sources, and organizational processes.
- data validation and verification,
- data cleaning,
- master data management,
- ensuring data integrity and consistency.
11. Training summary
The closing segment consolidates the full workflow from acquisition and protection to analysis, reporting, and governance. It is used to connect operational decisions with data quality, access control, storage, and recovery, so the end-to-end process can be assessed as one coherent practice.