IT4853 - Computer Forensics

Course Description

This course studies techniques and tools in computing investigation, digital evidence collection, recovery, and analysis. Topics include understanding the computer forensics profession; understanding different OS file systems; image recovery; network forensics; investigating logs and network traffic, recovery of passwords.  The course will provide hands-on experience labs conducting a variety of forensics practices. These skills can help prepare trainees for a variety of IT positions, including: Computer Forensic Analyst, Digital Forensic Examiner, Digital Forensics Incident Response and Security Administrator.

Learning Objectives

By the end of this course, a student should be able to:

  • Describe the role of computer forensics professionals.
  • Analyze hard disks and File System in Window and Linux OS.
  • Perform data carving and steganography.
  • Evaluate digital forensics tools for web browser, network, and email forensics.
  • Recover passwords, analyze log data files, and create professional forensic reports

Course Syllabus

Download a sample IT4853 syllabus.

Learning Content

©