The course includes presentations and hands-on instruction on such topics as partitioning, data storage, hardware and software write blockers, the boot up & shutdown processes, live imaging, encryption detection, and duplicate imaging best practices.