Technology & security
Digital Forensics Foundations
Build an evidence-led Digital Forensics Foundations foundation you can explain in a real workplace or interview.
Develop advanced, evidence-led digital forensics foundations capability for complex workplace situations.
About this course
A rigorous ten-module professional programme combining structured study, practical scenarios, controlled activities, portfolio evidence and a demanding timed final assessment.
Career relevance
Where this can take you
Designed for learners exploring technology careers and building a practical, honest portfolio.
Portfolio project: Create a Digital Forensics Foundations capstone pack that documents your purpose, method, evidence, quality check and next action.
Skills you will gain
Practical skills, not just theory
What you will learn
Plan and deliver controlled digital forensics foundations work.
Evaluate evidence, risk and quality before acting.
Communicate recommendations, limitations and escalation paths clearly.
Create a portfolio-ready capstone with documented professional judgement.
Objective map
A numbered, measurable syllabus
Every lesson, knowledge check and practical activity maps to the objectives below. Domain weights show how much of the programme each area represents.
Domain 1
Authority, scope and ethical boundaries to Authorised acquisition and integrity verification
- 1.1Demonstrate authority, scope and ethical boundaries in a realistic digital forensics foundations context: digital Forensics Foundations: apply advanced workplace methods in module 1, document evidence, test assumptions, manage risk and identify the correct next action.
- 1.2Demonstrate evidence identification and chain of custody in a realistic digital forensics foundations context: digital Forensics Foundations: apply advanced workplace methods in module 2, document evidence, test assumptions, manage risk and identify the correct next action.
- 1.3Demonstrate authorised acquisition and integrity verification in a realistic digital forensics foundations context: digital Forensics Foundations: apply advanced workplace methods in module 3, document evidence, test assumptions, manage risk and identify the correct next action.
Domain 2
Examination notes and artefact interpretation to Cloud, mobile and privacy-aware evidence handling
- 2.1Demonstrate examination notes and artefact interpretation in a realistic digital forensics foundations context: digital Forensics Foundations: apply advanced workplace methods in module 4, document evidence, test assumptions, manage risk and identify the correct next action.
- 2.2Analyse and evaluate timeline analysis and corroboration in a realistic digital forensics foundations context: digital Forensics Foundations: apply advanced workplace methods in module 5, document evidence, test assumptions, manage risk and identify the correct next action.
- 2.3Demonstrate cloud, mobile and privacy-aware evidence handling in a realistic digital forensics foundations context: digital Forensics Foundations: apply advanced workplace methods in module 6, document evidence, test assumptions, manage risk and identify the correct next action.
Domain 3
Findings reports and neutral communication to Capstone: authorised evidence case
- 3.1Demonstrate findings reports and neutral communication in a realistic digital forensics foundations context: digital Forensics Foundations: apply advanced workplace methods in module 7, document evidence, test assumptions, manage risk and identify the correct next action.
- 3.2Apply and control quality assurance and error management in a realistic digital forensics foundations context: digital Forensics Foundations: apply advanced workplace methods in module 8, document evidence, test assumptions, manage risk and identify the correct next action.
- 3.3Complete and defend capstone: authorised evidence case in a realistic digital forensics foundations context: digital Forensics Foundations: apply advanced workplace methods in module 9, document evidence, test assumptions, manage risk and identify the correct next action.
Domain 4
Professional boundaries and ethical portfolio
- 4.1Complete and defend professional boundaries and ethical portfolio in a realistic digital forensics foundations context: digital Forensics Foundations: apply advanced workplace methods in module 10, document evidence, test assumptions, manage risk and identify the correct next action.
How the programme works
Learn, practise, explain and prove it
This is a long-form, eight-week guided programme rather than a stack of short articles. Each module contains six substantial lessons that move from concepts and methods into a worked case, a quality clinic, a workplace lab and assessed reflection.
1. Guided learning
Study the purpose, process, risks and professional standard through structured readings and active notes.
2. Worked cases
Compare plausible options, expose missing evidence and defend a decision under realistic constraints.
3. Quality clinics and labs
Diagnose weak work, revise it against a rubric and create portfolio evidence with a full audit trail.
4. Hard assessment
Pass applied checks and the final assessment at 85%, with no unresolved critical-error questions.
Curriculum
A complete programme, module by module
The curriculum below shows the actual learning pathway, objective and evidence for every module. Full lessons remain locked until enrolment.
Build the base
Standards, vocabulary and the core method you will use throughout the programme.
01Authority, scope and ethical boundariesDigital Forensics Foundations: apply advanced workplace methods in module 1, document evidence, test assumptions, manage risk and identify the correct next action.+
Measured objectiveDemonstrate authority, scope and ethical boundaries in a realistic digital forensics foundations context: digital Forensics Foundations: apply advanced workplace methods in module 1, document evidence, test assumptions, manage risk and identify the correct next action.
Evidence you will produceA technical authority, scope and ethical boundaries brief with requirements, safe method, sample output or architecture, validation evidence and handover notes.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
02Evidence identification and chain of custodyDigital Forensics Foundations: apply advanced workplace methods in module 2, document evidence, test assumptions, manage risk and identify the correct next action.+
Measured objectiveDemonstrate evidence identification and chain of custody in a realistic digital forensics foundations context: digital Forensics Foundations: apply advanced workplace methods in module 2, document evidence, test assumptions, manage risk and identify the correct next action.
Evidence you will produceA technical evidence identification and chain of custody brief with requirements, safe method, sample output or architecture, validation evidence and handover notes.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
03Authorised acquisition and integrity verificationDigital Forensics Foundations: apply advanced workplace methods in module 3, document evidence, test assumptions, manage risk and identify the correct next action.+
Measured objectiveDemonstrate authorised acquisition and integrity verification in a realistic digital forensics foundations context: digital Forensics Foundations: apply advanced workplace methods in module 3, document evidence, test assumptions, manage risk and identify the correct next action.
Evidence you will produceA technical authorised acquisition and integrity verification brief with requirements, safe method, sample output or architecture, validation evidence and handover notes.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
Milestone: You can explain the fundamentals and complete a first guided task.
Develop core skills
The working skills and tools of the role, practised one at a time.
04Examination notes and artefact interpretationDigital Forensics Foundations: apply advanced workplace methods in module 4, document evidence, test assumptions, manage risk and identify the correct next action.+
Measured objectiveDemonstrate examination notes and artefact interpretation in a realistic digital forensics foundations context: digital Forensics Foundations: apply advanced workplace methods in module 4, document evidence, test assumptions, manage risk and identify the correct next action.
Evidence you will produceA technical examination notes and artefact interpretation brief with requirements, safe method, sample output or architecture, validation evidence and handover notes.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
05Timeline analysis and corroborationDigital Forensics Foundations: apply advanced workplace methods in module 5, document evidence, test assumptions, manage risk and identify the correct next action.+
Measured objectiveAnalyse and evaluate timeline analysis and corroboration in a realistic digital forensics foundations context: digital Forensics Foundations: apply advanced workplace methods in module 5, document evidence, test assumptions, manage risk and identify the correct next action.
Evidence you will produceA checked working paper, analysis or report for timeline analysis and corroboration, including source data, assumptions, calculations, findings and limitations.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
06Cloud, mobile and privacy-aware evidence handlingDigital Forensics Foundations: apply advanced workplace methods in module 6, document evidence, test assumptions, manage risk and identify the correct next action.+
Measured objectiveDemonstrate cloud, mobile and privacy-aware evidence handling in a realistic digital forensics foundations context: digital Forensics Foundations: apply advanced workplace methods in module 6, document evidence, test assumptions, manage risk and identify the correct next action.
Evidence you will produceA technical cloud, mobile and privacy-aware evidence handling brief with requirements, safe method, sample output or architecture, validation evidence and handover notes.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
Milestone: You can carry out routine work independently and check it properly.
Apply it in realistic scenarios
Case studies and simulations with competing priorities and incomplete information.
07Findings reports and neutral communicationDigital Forensics Foundations: apply advanced workplace methods in module 7, document evidence, test assumptions, manage risk and identify the correct next action.+
Measured objectiveDemonstrate findings reports and neutral communication in a realistic digital forensics foundations context: digital Forensics Foundations: apply advanced workplace methods in module 7, document evidence, test assumptions, manage risk and identify the correct next action.
Evidence you will produceA checked working paper, analysis or report for findings reports and neutral communication, including source data, assumptions, calculations, findings and limitations.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
08Quality assurance and error managementDigital Forensics Foundations: apply advanced workplace methods in module 8, document evidence, test assumptions, manage risk and identify the correct next action.+
Measured objectiveApply and control quality assurance and error management in a realistic digital forensics foundations context: digital Forensics Foundations: apply advanced workplace methods in module 8, document evidence, test assumptions, manage risk and identify the correct next action.
Evidence you will produceA technical quality assurance and error management brief with requirements, safe method, sample output or architecture, validation evidence and handover notes.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
09Capstone: authorised evidence caseDigital Forensics Foundations: apply advanced workplace methods in module 9, document evidence, test assumptions, manage risk and identify the correct next action.+
Measured objectiveComplete and defend capstone: authorised evidence case in a realistic digital forensics foundations context: digital Forensics Foundations: apply advanced workplace methods in module 9, document evidence, test assumptions, manage risk and identify the correct next action.
Evidence you will produceA technical capstone: authorised evidence case brief with requirements, safe method, sample output or architecture, validation evidence and handover notes.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
Milestone: You can make and justify decisions in realistic situations.
Prove it and plan your next step
Portfolio evidence, final review and a development plan you can show an employer.
10Professional boundaries and ethical portfolioDigital Forensics Foundations: apply advanced workplace methods in module 10, document evidence, test assumptions, manage risk and identify the correct next action.+
Measured objectiveComplete and defend professional boundaries and ethical portfolio in a realistic digital forensics foundations context: digital Forensics Foundations: apply advanced workplace methods in module 10, document evidence, test assumptions, manage risk and identify the correct next action.
Evidence you will produceA technical professional boundaries and ethical portfolio brief with requirements, safe method, sample output or architecture, validation evidence and handover notes.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
Milestone: You have portfolio-ready evidence and a clear next step.
Suggested pace
Eight-week study plan
Plan for roughly 5–9 hours each week across readings, worked cases, practice, portfolio production and assessment remediation. Repeat a week when the knowledge checks show a gap.
Week 1
Authority, scope and ethical boundaries to Evidence identification and chain of custody
- •Complete the six guided lessons for Authority, scope and ethical boundaries and Evidence identification and chain of custody and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the authority, scope and ethical boundaries and evidence identification and chain of custody portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 2
Authorised acquisition and integrity verification
- •Complete the six guided lessons for Authorised acquisition and integrity verification and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the authorised acquisition and integrity verification portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 3
Examination notes and artefact interpretation
- •Complete the six guided lessons for Examination notes and artefact interpretation and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the examination notes and artefact interpretation portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 4
Timeline analysis and corroboration
- •Complete the six guided lessons for Timeline analysis and corroboration and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the timeline analysis and corroboration portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 5
Cloud, mobile and privacy-aware evidence handling to Findings reports and neutral communication
- •Complete the six guided lessons for Cloud, mobile and privacy-aware evidence handling and Findings reports and neutral communication and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the cloud, mobile and privacy-aware evidence handling and findings reports and neutral communication portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 6
Quality assurance and error management
- •Complete the six guided lessons for Quality assurance and error management and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the quality assurance and error management portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 7
Capstone: authorised evidence case
- •Complete the six guided lessons for Capstone: authorised evidence case and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the capstone: authorised evidence case portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 8
Professional boundaries and ethical portfolio
- •Complete the six guided lessons for Professional boundaries and ethical portfolio and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the professional boundaries and ethical portfolio portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Submit the capstone evidence pack, defend the key decision, remediate every weak objective and pass the final assessment at 85% with no critical misses.
Technology & security
Continue your learning path
AI for Work & Prompting
Use generative AI responsibly to research, write, analyse and improve everyday work.
60–72 hours
AI Product Management
Plan responsible AI-enabled products around people, value and risk.
50–60 hours
API & Integration Foundations
Understand how systems exchange information safely and reliably.
55–66 hours
Assessment and certificate
A long, timed scenario-based assessment across all ten modules, plus practical portfolio evidence. This is a UGEN ACADEMY completion record, not an external professional licence.
UGEN ACADEMY pricing
Choose the access that fits your learning plan.
Flexible
8-course pass
R120 / month
Choose and study up to 8 Academy courses during each active billing month.
Choose 8-course pass →Best value
All-access pass
R250 / month
Access every available UGEN ACADEMY course while your subscription is active.
Choose all-access pass →This course
Buy this course
R50 once-off
Beginner course. Keep access to this course without a monthly subscription.
Buy this course →Subscriptions renew monthly until cancelled. The 8-course pass allows up to eight course selections per active billing month; individual-course access has no monthly renewal.
Who this is for
- ✓Professionals progressing in technology careers.
- ✓Learners building credible digital forensics foundations evidence.
- ✓Career changers prepared for sustained, scenario-led study.