Computer and Network Forensics, IT 538
About this Course:
This course will address methods to properly conduct a computer and/or network forensics investigation including digital evidence collection and evaluation and legal issues involved in network forensics. Technical issues in acquiring court-admissible chans-of evidence using various forensic tools that reconstruct criminally liable actions at the physical and logical levels are also addressed. Technical topics covered include detailed analysis of hard disks, files systems (including FAT, NTFS and EXT) and removable storage media; mechanisms for hiding and detecting hidden information; and the hands-on use of powerful forensic analysis tools.
IT 448 System and Network Security or equivalent experienced is required for enrollment.
Who Should Attend:
Individuals who are interested in learning how to properly conduct a computer and/or network forensics investigation with various forensic tools.
Nature of computer forensics and network forensics
Legal and civil issues and investigations; forensic certification
File systems & booting (DOS & Windows)
File systems & booting (Unix, Linux & Macintosh)
Computer forensic analysis
Network forensic analysis
Email & web investigations
Forensic reporting and the role of expert witnesses