COMPUTER FORENSIC (2 SCU)

Learning Outcomes:

On successful completion of this course, students will be able to: LO1 – define fundamental concepts, principles, and processes of computer forensics, including legal and ethical considerations; LO2 – demonstrate to use appropriate forensic tools and techniques to acquire, analyze, and interpret digital evidence from various operating systems, file systems, and network environments; LO3 – apply computer forensic methodologies to conduct artifact analysis, timeline reconstruction, and reporting, including automation and scripting for forensic tasks.

Topics:

1. Disk and File System Analysis;
2. Mac OS X Systems and Artifacts;
3. Linux Systems and Artifacts;
4. Internet Artifacts;
5. File and Archives Analysis;
6. Scripting and Automation for Forensic Tasks;
7. Windows Systems Artifacts;
8. Key Technical Concepts;
9. Data Acquisition;
10. Timeline Analysis & Correlation of Artifacts;
11. Digital Forensic Fundamental.