IT322 — Forensics I
Provides in-depth foundation in data recovery and computer forensics. Covers legal issues relevant to information security and digital forensics professionals. Students will learn the proper way to gather and secure evidence, document a computer crime scene, retrieve lost files, retrieve deleted files and e-mails and reconstruct data from various computer storage media. Students learn use of media imaging and data recovery tools. Stresses proper documentation and procedural guidelines. Students get hands-on experience with some of the popular commercial and open source digital forensics tools.
Prerequisites: IT278