his course covers the basic of digital investigation and the handling of digital evidence. Beginning with an overview of digital investigation processes, the course dive into the practical aspects of data acquisition from physical storage devices, emphasizing the importance of preserving the integrity of evidence. Student will learn advanced techniques in file system analysis, file recovery, and file carving, along with document analysis to uncover hidden or lost data. The course also covers specialized areas such as information hiding and steganography, providing skills to detect and decipher concealed information. Key forensic practices like time, registry, and password recovery are explored, along with methods for email and database forensics, essential for solving complex cybercrimes. Additionally, the course delves into memory acquisition techniques and network investigation, equipping students with necessary tools to tackle diverse challenges in the field of digital forensics. This course is designed to provide a thorough understanding of both the theoretical aspects of digital forensics, preparing student for real-world applications in this dynamic and evolving field.