Description

This course introduces the major forensic processes for investigating specific cybercrime. Such processes include concepts that include studying computer procedures, gathering, analyzing, recovering, and preserving digital evidence. Technically, the topics comprise imaging, hashing, file recovery, file system basics, identification of mismatched file types, reporting, and digital evidence methods. It also focuses on legal and other technical aspects of digital forensics and incident response.

Program

Undergraduate 132 CRs

Objectives

• • Develop a comprehensive understanding of the major forensic processes employed in the investigation of cybercrimes, including computer procedure analysis, and digital evidence collection, analysis, recovery, and preservation.
  • Acquire technical proficiency in critical areas, such as data imaging, hashing, file recovery techniques, file system fundamentals, and the identification of mismatched file types.
  • Learn how to effectively report and present digital evidence using established methodologies.
  • Explore the legal and technical dimensions of digital forensics and incident response, ensuring students are well-versed in both the practical and legal aspects of the field.