Digital Forensics

Catalog description

Digital forensics is concerned with the post-analysis of information systems that have already been compromised, usually by criminal actors. It is a field that encompasses a range of topics, including computer forensics, memory forensics, network forensics, and incident response. This course is an introduction to the investigation procedures that are used in digital forensics. These procedures, depending on the type of crime, reconstruct the events that led to the compromise. Students who take this course will gain an in depth understanding of handling digital evidence, gathering and investigating artifacts and evidence, and effectively managing security incidents, including incident response techniques for preventing and addressing cyberattacks. Prerequisite Course(s): Prerequisite: INCS 615