CYBER INVESTIGATIONS

Catalog description

Security incidents and cybercrimes detected by organizations are escalating in both scale and complexity. As a result, cyber investigation capabilities have become a critical mechanism for organizations in an effort to minimize the damage from incidents and cybercrimes. These investigations often involve the preservation, identification, extraction, analysis and documentation of digital data (evidence) stored on a variety of electronic devices. The aim of this course is to introduce graduate students to acceptable approaches for collecting, analyzing and reporting data from a cyber investigation. Topics include but are not limited to: an introduction to cyber investigations, cyber investigations and the law, incident response and first responder actions, investigation techniques, operating system analysis, and network investigations Students will be required to perform several analyses in a controlled lab environment.