In this course, students will cover the identification, handling, recovery, analysis and reporting of data on digital storage devices. Students will be introduced to the type and location of data of evidentiary value, from identification of binary structure to directory location. Topics include analysis of volume and file system, evidence data including, recovery of password protected and deleted data, Internet artifacts, thumb files, shadow files, and basic registry analysis. Hands-on exercises guide discussions and reinforce the subject matter. Two primary forensic tools are introduced and utilized in this course: Forensic Tool Kit Suite (FTK) Imager, and FTK. Other tools include freeware programs that are widely used for forensic purposes. Legal considerations of this profession are also covered.
Level I Prereq: Academic Reading and Writing Levels of 6; CST 160 minimum grade "C+"
Class offerings by semester
|Summer 2020||Fall 2020||Winter 2021||Summer 2021|
Day Class (before 5 p.m.) Evening Class (after 5 p.m.) Online Class
Class offerings by semester is offered as a planning tool. Please refer to the course
schedule to see the specifc time and platform for which the course is offered.
Class offerings by semester is offered as a planning tool. Please refer to the course schedule to see the specifc time and platform for which the course is offered.