ISM4324: Computer Forensic Analysis

This course focuses on the techniques and methods used to conduct forensic examinations of digital evidence. The course covers the entire process of computer forensics, from the initial seizure and preservation of evidence, to the analysis and presentation of findings in a court of law.

One of the main topics covered in the course is the use of forensic tools and software, such as EnCase and FTK, to recover and analyze data from various types of digital devices, including computers, smartphones, and storage media. Students will also learn about the legal and ethical considerations involved in computer forensics and the proper handling of evidence to ensure its admissibility in court.

The course also covers the various types of digital evidence that may be encountered in a forensic examination, including deleted files, hidden data, and encrypted files. Students will learn how to identify and extract relevant evidence and how to present their findings in a clear and concise manner.

In addition to the technical aspects of computer forensics, the course also covers the broader context of cybercrime and its impact on society. Students will learn about the different types of cybercrime, such as hacking, identity theft, and cyberstalking, and the legal and investigative challenges they pose.

This course is currently offered only as a for-credit college course.