Computer Forensics Lab

Catalog description

This course examines techniques used to analyze operating systems and counter anti-forensic activities during digital investigations. Students develop hands-on experience identifying and recovering digital evidence from Windows, macOS, and Linux systems. Topics include anti- forensic techniques such as encryption, steganography, artifact wiping, and trail obfuscation, as well as methods for collecting and analyzing volatile and non-volatile data. Students use forensic tools to recover deleted files, analyze operating system artifacts, and evaluate evidence relevant to cybersecurity investigations.