CYBR 4380 DIGITAL FORENSICS (3 credits)
Digital forensics involves the preservation, identification, extraction, analysis and documentation of digital evidence stored on a variety of electronic devices. The aim of this course is to introduce students to acceptable approaches for collecting, analyzing and reporting data from a forensics investigation. Topics include: an introduction to digital forensics, data acquisition, first response, memory forensics, operating system forensics, and network forensics. Students will be required to perform several forensics analyses in a controlled lab environment, including acquiring forensically sound hard drive images, memory images and analyzing these using industry standard tools, such as Forensic Toolkit (FTK). The Digital Forensics class is designed for Cybersecurity, Computer Science and other qualified students to learn what actions are both appropriate and required for preserving, collecting and analyzing digital evidence in cases of intrusion, data theft or other cybercrimes. (Cross-listed with CSCI 4380).
Prerequisite(s)/Corequisite(s): The student must take the following before enrolling: CYBR 3600 or CIST 3600, CSCI 3550 or ISQA 3400, CYBR 3370, CYBR 3350. Alternatively, instructor permission can be sought for students who have not met all of the above requirements.