TechnologyExplain Like I'm 5Beginner
Digital Forensics: Following the Electronic Trail course icon

Digital Forensics: Following the Electronic Trail

Like Duolingo, but for Digital Forensics: Following the Electronic Trail. Tomo turns the whole topic into a game you play five minutes a day, until it actually sticks.

For the part of you with thirty open tabs that never became anything.

11 bite-size levelsAbout 5 minutes each

Free forever · No credit card · iPhone & Android

Finch the Forensic Fox
Digital Forensics: Following the Electronic Trail
with Finch the Forensic Fox
11
Levels
2
Sections
5
Min/day
What you'll learn

Key ideas in Digital Forensics: Following the Electronic Trail

  • Opening files or folders updates 'Last Accessed' timestamps in the metadata
  • RAM is volatile and is wiped the moment the computer loses power
  • Any interaction with the OS can trigger background write operations
  • Hard drives store data semi-permanently on physical platters or flash chips
  • Forensic integrity requires that the original evidence remains bit-for-bit identical
  • The Order of Volatility dictates that the most 'fragile' data is saved first
  • The impact of interacting with a live system on metadata
  • Prioritizing evidence collection based on how fast it disappears
  • A write-blocker physically prevents the workstation from sending 'write' signals to the drive
  • Operating systems often automatically write hidden files or index data when a drive is plugged in
  • Using a write-blocker ensures the forensic copy is a perfect, untainted duplicate
  • The arrangement of cables can show which devices were connected during the crime
  • Identifying essential physical evidence at the scene
  • Pulling the power cord is a last-resort move to stop active data destruction
  • The function and necessity of a write-blocker
  • Standard shutdown procedures allow the OS to finish 'cleaning up' or deleting files
Why not just Google it

You've tried the other tabs

Wikipedia

Thirty open tabs. Four facts you actually kept.

YouTube

You watched. You nodded. By Sunday it was gone.

ChatGPT

One answer, then back to scrolling.

Online courses

Eight weeks. You meant to finish. You didn't.

Tomo gives Digital Forensics: Following the Electronic Trail the Duolingo treatment: levels, streaks, and quick quizzes that test what you just learned. That game loop is what the tabs above never had, so it's the one you actually finish.

Try a question

Here's what playing it feels like

A real question from this course. Take your best guess.

Keeping the Digital Scene Clean

What happens to the information stored in the RAM if a computer's power cord is pulled out?

Get it right to open this lesson and 10 more in the app.

Course map

Where Digital Forensics: Following the Electronic Trail takes you

Learn how to preserve, collect, and interpret digital evidence without accidentally destroying it. This course covers the essential mindset and tools used to solve digital mysteries.

  1. 1

    Securing the Digital Scene

    • The First Response: Do No Harm
    • The Chain of Custody
  2. 2

    Hunting for Evidence

    • Finding Hidden Artifacts
    • Reconstructing the Story

2 sections · 4 units · 11 levels. Built to play, not to enroll.

How it's taught

You pick the voice

This course
Explain Like I'm 5

Digital Forensics: Following the Electronic Trail is taught in the Explain Like I'm 5 style: no big words. promise.. Want a different feel? In the app you can spin up the same topic in any of Tomo's teaching styles. Same facts, totally different vibe.

Start free

Start Digital Forensics: Following the Electronic Trail today.

Download Tomo, search Digital Forensics: Following the Electronic Trail, and play your first lesson in under a minute.