CST 270: Computer Forensics

In this course, students will learn the practice of identification, handling, recovery, analysis and reporting of data on digital storage devices. Students will be introduced to identifying the types and locations of evidentiary data, from analysis of hexadecimal file structures to directory and registry location. Topics include analysis of file systems, evidence data, including recovery of password protected and deleted files, Internet artifacts, thumb files, shadow files, and basic registry analysis. Hands-on exercises guide discussions and reinforce the subject matter. Common forensic acquisition and analysis tools are introduced and utilized in this course, including Forensic Tool Kit Suite (FTK) Imager, FTK and Autopsy. Other tools include freeware password recovery and hexadecimal analysis programs that are widely used for forensic purposes. Legal considerations of this profession are also covered. The title of this course was previously Computer Forensics I.

Level I Prereq: Academic Reading and Writing Levels of 6; CST 160 minimum grade "C+"

Class offerings by semester

  Winter Summer Fall

Even Years
(2022, 2024, 2026)

offered at nighttime offered at nighttime offered at nighttime

Odd Years
(2023, 2025, 2027)

offered at nighttime offered at nighttime offered at nighttime

offered in the daytimeDay Class (before 5 p.m.) offered at nighttimeEvening Class (after 5 p.m.) offered online Online Class
Revised: 3/30/23

Please refer to the course schedule to see the specific time and platform for which the course is offered.

Swipe left to see full chart

Check the schedule

Description Hours
Credits 4
Lecture Hours 60
Clinical Hours 0
Lab Hours 0
Other Hours 0
Total Hours 60

Swipe left to see full chart