Live System & Memory Forensics.

Catalog description

Students examine advanced collection and analysis of digital evidence from systems and networks when they are running. Topics may include data acquisition, memory, network connections and traffic, user accounts and passwords, environmental variables, and system and application logs. The course also includes the comparison and evaluation of live forensic tools and techniques. Prerequisite: DFSC 5316 .