This unit describes the performance outcomes, skills and knowledge required to use tools and techniques to use Digital Forensics and Incident Response (DFIR) methodology, frameworks, and tools to analyse malware and reverse engineer software to investigate and mitigate risks to operating systems. It requires an understanding of malware investigation tools, C programming language, and software structure.

The unit applies to those working as Digital Forensics and Incident Response (DFIR) professionals, either within their organisation or as independent cyber security researchers. They apply specialised protocols and diverse penetration testing methods to find and report vulnerabilities to organisations in various fields and industry sectors, with the aim of strengthening their infrastructure.

No licensing, legislative or certification requirements apply to this unit at the time of publication.