Digital Forensics

Catalog description

Modern technologies have created a myriad of ways that data can be stored and communicated - and hidden. Digital forensics is the science of finding those data after the fact. This course presents an overview of the principles and practices of digital investigation and prepares students to conduct a cyber forensics investigation in an organized and systematic way. The course allows students to develop skills in collecting, seizing and analyzing suspect devices, creating forensics images, recovering deleted data from various file systems and damaged media, applying digital forensics techniques to e-mail and other electronic communications and describing incident and intrusion response approaches, among other topics. PREREQUISITES: IT508 and IT513