Introduction to Computer Forensic Methodology
Class Schedule
This class provides an overview of the history of computer forensics in the evolution of cyber-crimes. You will gain a basic understanding and legal awareness of computer forensics, the techniques used in the evidentiary process, the various methodologies intrinsic to computer forensics with an emphasis on computer incident response and evidence gathering and processing methodologies. The importance of ethics, understanding rules of evidence, effective communications, key elements of search and seizure relative to privacy legislation will also be discussed.
|
Forensic Evidence Preservation
Class Schedule
This class focuses on basic concepts of properly preserving computer, or digital media evidence. You will learn preparation process associated with imaging and storing electronic evidence, how to forensically preview computer media, and the operations of imaging devices such as Forensic Toolkit (FTK) Imager, Encase and Partition Dump (DD). You will gain an understanding of how to verify the integrity of an image file.
* Class includes a Digital Intelligence ULTRABLOCK-USB Kit for students to keep.
|
Tools & Technology of Computer Forensic Investigations
Class Schedule
Examine the common tools employed in a computer forensic investigation. The focus of the class is to develop a working knowledge of the Forensic Toolkit (FTK) and EnCase tools. You will learn to apply the appropriate forensic tools through hands-on experience using real-world scenarios.
|
Forensic Evidence Analysis
This class is an in-depth study into evidence analysis of computer forensic investigations and the challenges of incident response analysis. You will learn to identify, replicate and analyze digital data prior to corruption in evaluating containment of a potential compromise. Focus will be on the investigative aspects relative to the legal integrity of the data analysis. You will learn about the laws of evidence in collecting, preserving, analyzing, and presenting computer forensics evidence in legal proceedings.
|
Computer Forensics - Investigative Simulation
This capstone class is conducted in a laboratory environment that provides hands-on experience using software to create a live simulation of compromised system images to demonstrate the components inherent in forensic investigations. You will learn to identify and analyze digital data and to appropriately present the findings as evidence in litigation proceedings.
|