- International Fees
International fees are typically 3.25 times the domestic tuition. Exact cost will be calculated upon completion of registration.
Course Overview
This course will introduce learners to Computer Forensics Fundamentals as well as the Computer Forensics Investigation Process. Students will learn about Dark Web, Windows, Linux, Malware Forensics, and how to use different tools to investigate web and email attacks. This course will provide students with in-depth knowledge and practical experience on current investigation tools.
Prerequisite(s)
- Ethical Hacking, Basic knowledge of networking, routing, switching and OS.
Credits
1.0
Domestic fees
$222.30
Learning Outcomes
Upon successful completion of this course, the student will be able to:
- Describe fundamental concepts of computer forensics
- Describe Types of disk drives, their characteristics, logical structure, and various OS booting processes
- Identify Anti-forensics techniques and countermeasures
- Implement Windows and Linux forensics
- Explore how to recover deleted data from various operating systems
- Explore Malware forensics
- Explore Linux CSI to do the forensic
- Explore OSINT in Linux CSI
- Implement Autopsy to do a Forensic in the captured image
- Explore cache, cookie, and history Forensic in the browser
- Describe Dark web and TOR browser forensics
Effective as of Winter 2022
Related Programs
Forensic Investigation (XCSA 1104) is offered as a part of the following programs:
- Indicates programs accepting international students.
School of Energy
- Cybersecurity Analysis for Network Administrators
Microcredential Part-time
Course Offerings
Winter 2026
Below is one offering of XCSA 1104 for the Winter 2026 term.
CRN 90077
Dates
Mar 02 - May 08 Loading
- CRN 90077
- $222.30 Domestic fees
Class meeting times
| Dates | Days | Times | Locations |
|---|---|---|---|
| Mar 02 - May 08 | N/A | N/A | Online |
Duration
10 weeks
Instructor
Hamidreza Talebi
Course outline
Important information
- International fees are typically 3.25 times the domestic tuition. Exact cost will be calculated upon completion of registration.
- If you have any question about this course, please contact the Program Assistant at soepts@bcit.ca. Please include your BCIT student ID (if you have one). This course is asynchronous and will be delivered fully online. There are no scheduled class sessions and there is no attendance requirement. Instead, course materials are provided online and students have a maximum of 10 weeks to complete each course. Students will follow the instructor week by week as they move through the course content and complete course activities. Online delivery of courses at BCIT is through our Learning Hub (learn.bcit.ca), which provides a rich, multi-media platform for our distance learners. Note: BCIT reserves the right to cancel courses. In the event of a course cancellation, you will be notified at least two business days prior to the course start. Please ensure that your contact information is current in your myBCIT. This course is eligible for students to receive funding through the StrongerBC future skills grant at www.bcit.ca/financial-aid/strongerbc-future-skills-grant/. Students will register for the course themselves and then apply for the StrongerBC future skills grant to cover payment (if eligible). The Winter 2026 StrongerBC future skills grant (FSG) will only be eligible for students continuing their FSG-eligible program that they started in Fall 2025.
Status
Spring/Summer 2026
Below is one offering of XCSA 1104 for the Spring/Summer 2026 term.
CRN 68165
Dates
Jun 01 - Aug 07 Loading
- CRN 68165
- $222.30 Domestic fees
Class meeting times
| Dates | Days | Times | Locations |
|---|---|---|---|
| Jun 01 - Aug 07 | N/A | N/A | Online |
Duration
10 weeks
Instructor
TBD
Course outline
Course outline TBD — see Learning Outcomes in the interim.
Important information
- International fees are typically 3.25 times the domestic tuition. Exact cost will be calculated upon completion of registration.
- For questions about this course, please contact the Program Assistant at soepts@bcit.ca. Please include your BCIT student ID (if you have one). Note: BCIT reserves the right to cancel courses. In the event of a course cancellation, you will be notified at least two business days prior to the course start. Please ensure that your contact information is current in your myBCIT.
Status
Programs and courses are subject to change without notice.