ISCS 0537 - Computer Forensics
Credits: 3
Semester: 1st Semester
Lecture: 3
This course will introduce collecting, examining, and preserving digital evidence in support of criminal investigations, civil investigations, and sensitive business matters. The laws, regulations, and international standards governing sound forensics processes at cyber crime scene will be discussed. The course examines the issues, tools, techniques, and processes needed to successfully prepare for, respond to, and investigate such matters. The student will be also be introduced to some of the advanced computer forensics topics such as encryption, password cracking tools, data hiding techniques, stenography, anti-forensic tools and their effect on investigation, forensic problem solving (reconstruction of web pages from web cache, reverse engineering of P2P networks, images, etc.) hidden partitions, advanced MAC (modified, accessed, created) time discussion, metadata, etc. The student will be expected to take a case study from beginning to the end of investigation and course process. The student will receive a case study problem, and will be expected to write incident reports, collect evidence, acquire digital evidence, and perform the forensic investigation of several types of digital evidence, write reports regarding the forensic examinations, participate in trial preparation and courtroom testimony.
Prerequisite(s): ISCS 530 or Departmental Approval
Add to Portfolio (opens a new window)
|