Computer Forensics and Incident Response

Catalog description

This course is an introduction to general forensic processes for investigating cybercrime. The student learns the legal and technical aspects of digital forensics and incident response. Areas of study include procedures for investigating computer and cybercrime, and concepts for collecting, analyzing, recovering, and preserving forensic evidence. Technical subjects include imaging, hashing, file recovery, file system basics, identifying mismatched file types, reporting, and laws regarding computer evidence.