Network Forensics

Catalog description

This course is a broad introduction to the field of Digital Forensics. It covers various fundamental topics necessary for digital forensics investigation, and a variety of hardware and software tools that are commonly used during the investigation. The course begins with foundations of electronic evidence including cybercrime laws, the 4th Amendment, compliance and requirements, collection and handling, analysis, and reporting. The course also covers fundamentals of file systems with specific details pertaining to Microsoft FAT file systems. Students will learn two important forensics techniques -file recovery and file carving-among other things. In addition, basic techniques used in Network-based digital forensics will also be covered. Finally, Anti-forensics will also be discussed. Hands-on lab activities familiarize students with several relevant investigation techniques.