CAP2140 Digital Forensics I

Abstract

This part 1 of the course presents computer forensics in today’s world. The course provides general information about computer forensics, physical security needs, evaluation of equipment needs, tools, terminology of information security, and understanding of investigation process, responder procedures, incident handling and creating reports to present for the court cases. Students will gain an in-depth understanding of the tools and techniques used by computer forensics experts such as analysis of file structures, evidence imaging, data recovery, e-mail investigations, password recovery and decryption of encrypted data.