Cyber Forensics

Catalog description

This course covers the technical and legal aspects of cyber forensics, including general forensic procedures, electronic discovery, imaging, hashing, file recovery, mismatched file types, and preserving the chain of evidence. Students will perform detailed cyber forensic analyses on compromised system images, using both open-source and court-approved digital forensic software tools to conduct forensic examinations, write analytical reports, and practice mock courtroom presentations.