DIGITAL FORENSICS AND INCIDENT RESPONSE

Catalog description

This course introduces the fundamentals of digital forensics and incident response investigations. While these investigations follow similar processes and utilize similar tools, their desired outcomes differ: legal attribution and prosecution vs. return to operations. Formal methodologies, frameworks, processes, and procedures for conducting DFIR investigations are discussed and evaluated. The relevant legal framework requirements for DFIR investigations are examined as well. Prerequisites: COMP6500 (3 credits)