Home: IS 234 Computer Forensics I

This class teaches the process of computer forensics examination. This includes search and seizure, making forensically defensible copies of digital evidence, locating and reporting evidence, and presenting in court. Students learn by performing these steps in a simulated forensics lab environment.
Next Offering: Fall 2008

Course Outline

  1. Introduction the digital forensics process
  2. Ethical and legal issues for the digital forensics examiner
  3. Survey of digital forensics tools
  4. Acquiring digital evidence
  5. Searching, organizing and analyzing evidence
  6. File system fundamentals
  7. Using AccessData's Forensic Toolkit (FTK)