Course Syllabus
Incident Response and Digital Forensics
Level: Postgraduate (PG Diploma)
Duration: 16 Weeks
Credits: 3 Credit Hours
✓ Course Description
This course provides advanced knowledge in incident response and digital forensics,
focusing on technical investigation, strategic response, and real-world cyber incident
handling. Students will gain hands-on experience in forensic analysis, malware
investigation, and threat intelligence.
✓ Learning Outcomes
•
•
•
•
•
•
Design and implement Incident Response Plans (IRP)
Conduct advanced forensic investigations (memory, disk, network)
Analyze and reverse engineer malware
Apply threat intelligence frameworks
Produce professional forensic reports
Perform independent research in cybersecurity
✓ Weekly Schedule
Week 1
Introduction to Cyber Incidents & Lab Setup
Week 2
Incident Response Frameworks (NIST, ISO)
Week 3
Legal & Ethical Considerations
Week 4
Threat Detection & SIEM
Week 5
Incident Triage & Classification
Week 6
Containment, Eradication & Recovery
Week 7
Memory Forensics
Week 8
Disk Forensics (Midterm)
Week 9
Network Forensics
Week 10
Advanced Network Investigation
Week 11
Static Malware Analysis
Week 12
Dynamic Malware Analysis
Week 13
Reverse Engineering
Week 14
Threat Intelligence (MITRE ATT&CK)
Week 15
Incident Reporting
Week 16
Project & Final Assessment
✓ Assessment Structure
- Assignments: 5%
- Labs: 5%
- Midterm Exam: 30%
- Project: 20%
- Participation: 10%
-Final Exam:30%
✓ Tools and Technologies
- SIEM: Splunk / ELK Stack
- Malware Analysis: Ghidra, Sandbox
- Disk Forensics: Autopsy / FTK
- Network Analysis: Wireshark
- Memory Forensics: Volatility, Redline
- Virtualization: VMware / VirtualBox