In the course of digitalisation, cyber attacks on companies are increasing exponentially. The perpetrators come to a large extent from within the organisation, so that the forensic investigation of an information security incident is important. In many cases, IT departments lack the know-how to carry out forensic investigations or to commission them correctly. In the online seminar, experts from Fraunhofer SIT give an introduction to digital forensics and convey terminology, procedures and techniques for searching for clues.