Digital Forensics and Investigation

Catalog description

This course is an overview of the principles and practices of digital investigation. Fundamentals and the importance of digital forensics is emphasized. Students learn different techniques and procedures that enable them to perform a digital investigation with a primary focus on the analysis of physical storage media and volume analysis. It covers the major phases of digital investigation such as preservation, analysis and acquisition of artifacts that reside in hard disks and random-access memory. Upon completion of the course, students will be able to apply open-source forensics tools to perform digital investigations and understand the underlying theory behind these tools.