Students will learn how to identify, collect, and preserve digital evidence with an emphasis on evidence collected from the Windows operating system. Topics include fundamental computer forensics principles, information extraction, legal issues, and challenges posed by variations in both data sources and devices. Students will use specialized forensic software to collect and use evidence in a forensically sound manner, to support an investigation.
- No prerequisites are required for this course.
- Not offered this term
- This course is not offered this term. Please check back next term or subscribe to receive notifications of future course offerings and other opportunities to learn more about this course and related programs.
Upon successful completion of this course, the student will be able to:
- Outline fundamental principles of computer forensics
- Extract data from computers running the Windows operating system
- Use forensic software and techniques to analyse digital evidence
- Locate and identify required evidence in different investigative scenarios
- Assess legal issues around evidence collection, presentation and jurisdiction
Effective as of Winter 2018
If you have a question or comment about this course, please complete and submit the form below.
Interested in being notified about future offerings of Digital Forensics 1 (FSCT 8512)? If so, fill out the information below and we'll notify you by email when courses for each new term are displayed here.
Programs and courses are subject to change without notice.