This course will develop basic computer forensics skills necessary to uncover digital evidence in an organized and reportable manner. The course will provide a comparative study of information technology, evidence analysis, chain of custody, and data retrieval. Students will have hands-on laboratory experience using computer forensic tools, evidence preservation techniques and documentation. Course is offered in the fall semester.
- Apply a layout and navigate cases step-by-step using forensics software
- Analyze hidden and deleted data on digital media
- Analyze data and refine the results
- Report and present investigation findings