CISC 320 Computer Forensics

This course provides the student with a unique hands-on experience in digital forensics using case studies. Emphasis is placed on computer incident responses and security risk assessments. Technical and legal issues regarding computer evidence are also covered since they have a bearing on both the computer incident response and the investigation. Computer evidence preservation is stressed using cross-validation of forensic tools and the documentation of computer evidence findings. Computer evidence processing methodologies and practices are also learned to combat legal challenges against the admissibility of computer-related evidence.