In this course, students will cover the identification, handling, recovery, analysis and reporting of data on digital storage devices. Students will be introduced to the type and location of data of evidentiary value, from identification of binary structure to directory location. Topics include analysis of volume and file system, evidence data including, recovery of password protected and deleted data, Internet artifacts, thumb files, shadow files, and basic registry analysis. Hands-on exercises guide discussions and reinforce the subject matter. Two primary forensic tools are introduced and utilized in this course: Forensic Tool Kit Suite (FTK) Imager, and FTK. Other tools include freeware programs that are widely used for forensic purposes. Legal considerations of this profession are also covered.
Level I Prereq: Academic Reading and Writing Levels of 6; CST 160 minimum grade "C+"
Class offerings by semester
Day Class (before 5 p.m.) Evening Class (after 5 p.m.) Online Class
The annual schedule class offerings by semester is offered as a planning tool. Please refer to the course schedule to see the specific time and platform for which the course is offered.
Swipe left to see full chart