Computer Forensics I

Catalog description

This course introduces the student to the fundamental concepts of digital forensics. Labs using primarily open source, free software and a variety of hardware reinforce the concepts discussed in classroom instruction. Students will examine data media in detail for structure, file system type, volumes, lost and hidden areas. Non-volatile storage media telemetry, including hard drives, flash drives/cards, and optical storage will be discussed. Essential and nonessential components in the metadata structures of FAT, NTFS, EXT3, and HFS/HFS+ and how they are parsed (with the primary emphasis on FAT and NTFS) will be examined as well. This class is primarily a hands-on experience. Co-requisite: NONE