Let’s face it, sometimes the cyber threat wins, and we need to learn from the incident. During the final stages of cyber incident response and recovery it is important that organizations understand the root causes behind the cyber-attack, how vulnerabilities were exploited, and learn more about the threat to continuously improve cyber risk mitigation activities. Digital Forensics is the primary tool that provides the analyst non-biased artifacts to be used as evidence for continuous improvement and for cyber-attack attribution. The Fundamentals of Digital Forensics course is designed to provide students with hands-on learning to identify, respond, investigate, and recover from cyber incidents.