Artifact collection Hardening Clinic
RCCE students will learn digital forensics acquisition, evidence handling, timeline reconstruction, memory and disk analysis, and forensic reporting. RCCE students will learn to collect and preserve digital evidence following forensically sound procedures, reconstruct attack timelines from multiple artifact sources, perform forensic analysis on endpoints, memory, networks, and cloud environments, and produce investigation reports that withstand legal and regulatory scrutiny. This hands-on hardening course focuses on reducing attack surface through practical configuration changes and security guardrails. Starting from foundational concepts, RCCE students will learn to apply hardening baselines, validate configurations, and measure the security improvement achieved. Students walk away with actionable hardening checklists and the skills to maintain hardened configurations as environments evolve.
- Security Engineers building defensive controls
- Security Analysts and Blue Team members
- Systems Administrators with security responsibilities
- GRC and Risk Professionals supporting controls
- Professionals implementing Artifact collection Hardening Clinic
- Execute hands-on tasks for artifact collection
- Execute hands-on tasks for hardening clinic
- Execute hands-on tasks for forensic acquisition — covering Collect and preserve digital evidence, Forensically sound procedures.
- Execute hands-on tasks for timeline reconstruction — covering Reconstruct attack timelines, Correlate multiple artifact sources.
- Execute hands-on tasks for forensic analysis — covering Analyze endpoints, memory, networks, Cloud environment investigations.
- Execute hands-on tasks for hardening & reporting — covering Apply hardening baselines, security configurations.
- Execute hands-on tasks for digital forensics fundamentals
- Execute hands-on tasks for what is digital forensics?
- Execute hands-on tasks for forensic principles — covering Scientific examination of digital evidence, Evidence integrity above all.
- Execute hands-on tasks for legal framework — covering Identification → Collection → Analysis.
- Execute hands-on tasks for evidence types & classification
- Execute hands-on tasks for volatile evidence — covering RAM contents and running processes, Network connections and sessions.
| Module 01 | Artifact Collection |
| Module 02 | Hardening Clinic |
| Module 03 | Forensic Acquisition |
| Module 04 | Timeline Reconstruction |
| Module 05 | Forensic Analysis |
| Module 06 | Hardening & Reporting |
| Module 07 | Digital Forensics Fundamentals |
| Module 08 | What Is Digital Forensics? |
| Module 09 | Forensic Principles |
| Module 10 | Legal Framework |
| Module 11 | Evidence Types & Classification |
| Module 12 | Volatile Evidence |
| Module 13 | Non-Volatile Evidence |
| Module 14 | Network Evidence |
All hands-on labs run on Rocheston Rose X OS. Students practice artifact collection hardening clinic by implementing the controls discussed in class, with a focus on real-world deployment, monitoring, and validation.
- Lab 1: Execute hands-on tasks for artifact collection
- Lab 2: Execute hands-on tasks for hardening clinic
- Lab 3: Execute hands-on tasks for forensic acquisition
- Lab 4: Execute hands-on tasks for timeline reconstruction
- Lab 5: Execute hands-on tasks for forensic analysis
Upon successful completion of this course, students will receive an official RCCE Course Completion Certificate for Artifact collection Hardening Clinic, verifiable through the Rocheston certification portal.
- Full access to all course materials and slide decks
- Hands-on lab access on Rocheston Rose X OS environment
- Access to Rocheston CyberNotes
- Access to Rocheston Zelfire — EDR/XDR SIEM platform
- Access to Rocheston Raven — online cyber range exercise platform
- Access to Rocheston Vulnerability Vines AI