IT4853 - Computer Forensics
Course Description
This course studies techniques and tools in computing investigation, digital evidence collection, recovery, and analysis. Topics include understanding the computer forensics profession; understanding different OS file systems; image recovery; network forensics; investigating logs and network traffic, recovery of passwords. The course will provide hands-on experience labs conducting a variety of forensics practices. These skills can help prepare trainees for a variety of IT positions, including: Computer Forensic Analyst, Digital Forensic Examiner, Digital Forensics Incident Response and Security Administrator.
Learning Objectives
By the end of this course, a student should be able to:
- Describe the role of computer forensics professionals.
- Analyze hard disks and File System in Window and Linux OS.
- Perform data carving and steganography.
- Evaluate digital forensics tools for web browser, network, and email forensics.
- Recover passwords, analyze log data files, and create professional forensic reports
Course Syllabus
Download a sample IT4853 syllabus.