Computer and Network Forensics, IT 538
About this Course:
This course will address methods to properly conduct a computer and/or network forensics investigation including digital evidence collection and evaluation and legal issues involved in network forensics. Technical issues in acquiring court-admissible chans-of evidence using various forensic tools that reconstruct criminally liable actions at the physical and logical levels are also addressed. Technical topics covered include detailed analysis of hard disks, files systems (including FAT, NTFS and EXT) and removable storage media; mechanisms for hiding and detecting hidden information; and the hands-on use of powerful forensic analysis tools.
Prerequisites:
IT 448 System and Network Security or equivalent experienced is required for enrollment.
Who Should Attend:
Individuals who are interested in learning how to properly conduct a computer and/or network forensics investigation with various forensic tools.
Course Outline:
Nature of computer forensics and network forensics
Legal and civil issues and investigations; forensic certification
Forensic methodologies
Evidence control
Forensic tools
File systems & booting (DOS & Windows)
File systems & booting (Unix, Linux & Macintosh)
Computer forensic analysis
Network forensic analysis
Email & web investigations
Steganography
Steganalysis
Watermarking
Forensic reporting and the role of expert witnesses
CEU:
4.5
Instructor:
William Lidinsky
As an International Association for Continuing Education and Training (IACET) Authorized Provider, the Professional Learning Programs department of the IIT School of Applied Technology (SAT) offers CEUs for its programs that qualify under the ANSI/IACET Standard.