This is an advanced course. It will guide participants through the process of digital forensics investigation and teach them to use relevant tools for analysis. In the initial phase, participants will be hands-on with the tools and become familiar with their usage and investigative aspects. In the latter part of the course, past CTF competition cases will be provided, and the solving process and technical details will be analyzed in depth, aiming to cultivate participants' practical experience and skills in digital forensics and enhance their investigative abilities, thereby providing valuable support for organizational cybersecurity defenses.