This module provides the principles and practical application of digital forensics and incident response (DFIR) for your company’s IT. Forensic science in general is the application of investigative techniques and validation of facts or evidence in a court of law. DFIR enables organizations and authorities to find out what exactly happened in a security breach. DFIR assures that an IT event correlates to a security incident that must be investigated further, whether or not hacking has been or being employed, and decides if it requires to be communicated to the entire DF or senior management team. Digital forensics employs standards and acceptable procedures in the collection of evidence and tools that does not modify and tamper associated data.