ISM 4324 Computer Forensics

In this course, students explore the digital forensics lifecycle, from incident response and evidence acquisition through analysis, reporting, and expert testimony. Students gain hands-on experience with industry-standard tools and methodologies used to investigate Windows, Linux, and macOS systems; mobile devices; cloud platforms; virtual environments; and network traffic. Topics include forensic lab operations, chain of custody, file system and registry analysis, memory and live acquisition, steganography, email and social media investigations, and IoT forensics. Emphasis is placed on the legal, ethical, and procedural standards required to produce evidence that holds up in corporate investigations and courts of law, preparing students for entry-level roles in Digital Forensics and Incident Response (DFIR), corporate investigations, and law enforcement digital forensics.

3 credits

Prerequisites

CTS 1650, ISM 3321

Course Fee

Lab fee $20.