This course is an introduction to digital forensics, guiding students into the world of digital investigation and analysis, where they will learn to use professional tools to analyze digital evidence. The first half of the course will introduce the subtle differences between digital forensics and incident response. The middle section will provide hands-on instruction to familiarize students with digital forensic techniques and investigation procedures. Finally, the course will simulate an investigation environment through a lab environment, allowing students to simulate participation in case analysis, experience the investigative process of cybersecurity professionals, and develop practical skills and response capabilities.