This course examines advanced technical aspects of digital computer evidence to include detection, collection, identification, and preservation. Emphasis is placed on specific tools and methods for extracting deleted or destroyed computer-related evidence.
Learning Objectives
Summarize the basic principles of computer forensics.
Summarize important laws regarding computer forensics.
Describe various computer crimes and how they are investigated.
Describe digital forensic methodologies and evidence handling techniques.
Outline the proper approach to collecting, seizing, and protecting evidence.
Explain techniques for hiding and scrambling information as well as how data is recovered.
Summarize various types of digital forensics.
Describe contingency planning and incident response.
Explain how to perform network packet analysis.
Identify technical and legal trends in digital forensics.
Framework Connections
Specialty Areas
- Cyber Defense Analysis
- Digital Forensics
Feedback
If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.