Computer Forensics

Catalog description

The main goal of this course is to provide students with an understanding of computer forensics and investigation tools and techniques. Students will gain a solid foundation in computer forensics and investigations. Most of the major personal computer operating system architectures and disk structures will be discussed. Students will learn how to set up an investigators office and laboratory, as well as what computer forensic hardware and software tools are available. Students will also learn the importance of digital evidence controls and how to process crime and incident scenes. Finally, students will learn the details of data acquisition, computer forensic analysis, e-mail investigations, image file recovery, investigative report writing, and expert witness requirements. The course provides a range of laboratory and hands-on assignments that teaches about theory as well as the practical application of computer forensic investigation.