Computer Forensics

Catalog description

This course will provide an introduction to digital forensic fundamentals and best practices for incidence response. Students will learn how to obtain and analyze digital information for possible evidence in civil, criminal, and administrative cases. Students will be introduced to the legal and regulatory aspects of computer forensics including an understanding of the judicial system, investigation process, importance of evidence chain of custody, admissibility of expert witness testimony and incident reporting. Topics covered will include the setup of a laboratory, digital evidence, crime scene processing, rules of evidence, report writing, data acquisition, file systems, and forensic analysis and file recovery. Outside lab time will be required.