Foundations in Computer Forensics

Catalog description

This course provides the student with an ability to perform basic forensic techniques and use appropriate media analysis software. Knowledge of the security, structure and protocols of network operating systems and devices will be covered as students learn to gather evidence in a networked environment and to image and restore evidence properly without destroying its value. The student will learn and practice gaining evidence from a computer system while maintaining its integrity and a solid chain of custody. Within the laboratory the student will gain hands-on experience in the use of current investigative tools. The students will classify and arrange forensics data on its value to the case. Credit will be earned once between CJ 442 and CYBR 442. Prerequisite: CYBR 341 or CJ341.