In this course, students will learn the practice of identification, handling, recovery, analysis and reporting of data on digital storage devices. Students will be introduced to identifying the types and locations of evidentiary data, from analysis of hexadecimal file structures to directory and registry location. Topics include analysis of file systems, evidence data, including recovery of password protected and deleted files, Internet artifacts, thumb files, shadow files, and basic registry analysis. Hands-on exercises guide discussions and reinforce the subject matter. Common forensic acquisition and analysis tools are introduced and utilized in this course, including Forensic Tool Kit Suite (FTK) Imager, FTK and Autopsy. Other tools include freeware password recovery and hexadecimal analysis programs that are widely used for forensic purposes. Legal considerations of this profession are also covered. The title of this course was previously Computer Forensics I.
Level I Prereq: Academic Reading and Writing Levels of 6; CST 160 minimum grade "C+"
Class offerings by semester
| Winter | Summer | Fall | |
|---|---|---|---|
|
Even Years |
 |
|
|
|
Odd Years |
|
|
|
|
Please refer to the course schedule to see the specific time and platform for which the course is offered. |
|||
Day Class (before 5 p.m.)
Online Class| Description | Hours |
|---|---|
| Credits | 4 |
| Lecture Hours | 60 |
| Clinical Hours | 0 |
| Lab Hours | 0 |
| Other Hours | 0 |
| Total Hours | 60 |
Swipe left to see full chart