CY 324 Forensic Computing

This lab-based course introduces concepts, tools and techniques related to forensic investigation in the digital world. The topics include FAT and NTFS file systems, registry artifacts, hardware write blockers, data recovery, memory and network data forensics and analysis, chain of custody, and fourth amendment considerations when searching and seizing digital evidence.