SEC 350 Introduction Computer Forensics

This hands-on introductory course provides students with the knowledge and skills necessary to begin a computer-based investigation. The course begins with an overview of computer forensics and then proceeds to introduce forensics tools, concepts, and documentation of evidence/procedures. The course uses common and accepted Incident Response Policies and Procedures for previewing and securing digital evidence. Topics include: (1) Learn "What exactly are computer forensics and computer evidence?" (2) Learn basic forensic methodology: a) how to acquire the evidence without altering or damaging the original, b) how to authenticate the recovered evidence, and c) how to analyze the data without modifying it.