Digital Forensics (Cybersecurity)

A practical digital forensics internship where you learn how investigations run end-to-end – from evidence collection to reporting – on real-world style cases.

12 weeks

12 projects

$700starting at

Program Overview

The TechPeak Lab Digital Forensics (Cybersecurity) internship is built around realistic case files. Across 12 weeks you will:\n\n- Collect and preserve evidence from disks, memory, and cloud accounts.\n- Analyse filesystem artefacts, registry hives, and browser traces.\n- Reconstruct timelines and attacker activity.\n- Write professional-grade investigation reports for stakeholders.\n\nYou'll finish with a portfolio of forensics case work that demonstrates how you think, not just which tools you know.

Skills You'll Gain

Evidence acquisition & preservation

File system and registry analysis

Timeline reconstruction

Malware & artefact triage

Forensic reporting

Chain-of-custody awareness

Tools & Technologies

Autopsy / Sleuth Kit

Volatility

Wireshark

Sysinternals

YARA

Python for analysis

Internship Structure

This 12-week internship is structured around hands-on project work. Each week builds upon the previous, introducing new concepts and challenges that mirror real industry scenarios.

You'll work independently on projects, receive structured feedback, and have the opportunity to refine your work based on instructor guidance.

Projects

Week 1 project preview

Disk Image Forensics Investigation

From week 1, you will work like a real digital forensics analyst: acquire evidence, preserve it correctly, and tell the story of what actually happened on a compromised system.

Requirements

- Acquire (or download) a forensic disk image suitable for lab use and verify its integrity using hashing. - Load the image into Autopsy, Sleuth Kit, or a similar forensic toolkit and perform a structured examination. - Identify user activity, interesting files, and potential indicators of compromise (suspicious executables, artifacts, etc.). - Construct a high-level timeline of key events (logins, file creations/modifications, application installs, etc.). - Maintain proper documentation so another analyst could reproduce your findings.

Deliverables

- Formal investigation report (PDF or Markdown) summarizing scope, tools used, findings, and conclusions. - Evidence appendix with screenshots from your forensic tool showing key artifacts (e.g., directory views, timelines, hex views where relevant). - Timeline table or diagram that highlights the most important events you discovered. - Hash values and acquisition notes proving that the image was handled in a forensically sound way.

Week 1

Disk Image Forensics Investigation

From week 1, you will work like a real digital forensics analyst: acquire evidence, preserve it correctly, and tell the story of what actually happened on a compromised system.

Enroll to access full projects, weekly briefs, and GitHub submission workflows.

Later weeks

Week 2