Introduction to Computer Forensics

Designed to provide a solid foundation in the theory and practice of essential computer forensic techniques, this introductory course in computer forensics focuses on preparing students to respond to many types of crisis situations by providing the skills needed to respond to an investigation. Focus is placed on the role of computer forensics and the methods used in the investigation of computer crimes. Other topics covered include aspects of the legal process that apply to computer forensics, detailed explanations of how to effectively manage a forensics investigation, and ways to preserve and present evidence. On the technical side, forensics on Windows Systems including the file system, the registry, and events will be discussed. Live analysis, linux systems, and browser artifacts are also included in the topics covered along with a primer on commercial tools as well as open source tools available.

Prerequisite: I&C SCI X465.00 Introduction to Cyber Security (required) and I&C SCI X465.01 Host and OS Security (recommended)