Undergraduate Admission
    Graduate Admission

    Computer and Network Forensics, IT 538

    About this Course:
    This course will address methods to properly conduct a computer and/or network forensics investigation including digital evidence collection and evaluation and legal issues involved in network forensics. Technical issues in acquiring court-admissible chans-of evidence using various forensic tools that reconstruct criminally liable actions at the physical and logical levels are also addressed. Technical topics covered include detailed analysis of hard disks, files systems (including FAT, NTFS and EXT) and removable storage media; mechanisms for hiding and detecting hidden information; and the hands-on use of powerful forensic analysis tools.

    Currently Scheduled

    Prerequisites:
    IT 448 System and Network Security or equivalent experienced is required for enrollment.

    Who Should Attend:
    Individuals who are interested in learning how to properly conduct a computer and/or network forensics investigation with various forensic tools.

    Course Outline:
    Nature of computer forensics and network forensics
    Legal and civil issues and investigations; forensic certification
    Forensic methodologies
    Evidence control
    Forensic tools
    File systems & booting (DOS & Windows)
    File systems & booting (Unix, Linux & Macintosh)
    Computer forensic analysis
    Network forensic analysis
    Email & web investigations
    Steganography
    Steganalysis
    Watermarking
    Forensic reporting and the role of expert witnesses

    CEU:
    4.5

    Instructor:
    William Lidinsky