SEC 350 Introduction Computer Forensics

This hands-on introductory course provides students with the knowledge and skills necessary to begin a computer-based investigation. The course begins with an overview of computer forensics and then proceeds to introduce forensics tools, concepts, and documentation of evidence/procedures. The course uses common and accepted Incident Response Policies and Procedures for previewing and securing digital evidence. Topics include: (1) Learn "What exactly are computer forensics and computer evidence?" (2) Learn basic forensic methodology: a) how to acquire the evidence without altering or damaging the original, b) how to authenticate the recovered evidence, and c) how to analyze the data without modifying it. This course replaces SEC220.