CIS 271 — Application Device Evidence Recovery (3) (2,2)
This lab intensive course will teach students how to analyze and recover potential evidence from digital media, applications, and operating systems. Students will utilize an industry standard self-contained digital forensics software suite, such as EnCase or Forensics Toolkit (FTK). Students will learn to use the software to manage cases, create evidence files, analyze disk and device images, use various search methods, and archive evidence. This course will also provide evidence recovery capabilities beyond what might be found in an all-in-one software suite. (1.2) Proficiency Credit Available (2 IS) Pass/No Credit Not Available.