Course Overview
This course will introduce learners to Computer Forensics Fundamentals as well as the Computer Forensics Investigation Process. Students will learn about Dark Web, Windows, Linux, Malware Forensics, and how to use different tools to investigate web and email attacks. This course will provide students with in-depth knowledge and practical experience on current investigation tools.
Prerequisite(s)
- Ethical Hacking, Basic knowledge of networking, routing, switching and OS.
Credits
1.0
Domestic fees
$222.30 - $226.83 See individual course offerings below for actual costs.
International fees are typically 3.4 times the domestic tuition. Exact cost will be calculated upon completion of registration.
Learning Outcomes
Upon successful completion of this course, the student will be able to:
- Describe fundamental concepts of computer forensics
- Describe Types of disk drives, their characteristics, logical structure, and various OS booting processes
- Identify Anti-forensics techniques and countermeasures
- Implement Windows and Linux forensics
- Explore how to recover deleted data from various operating systems
- Explore Malware forensics
- Explore Linux CSI to do the forensic
- Explore OSINT in Linux CSI
- Implement Autopsy to do a Forensic in the captured image
- Explore cache, cookie, and history Forensic in the browser
- Describe Dark web and TOR browser forensics
Effective as of Winter 2022
Related Programs
Forensic Investigation (XCSA 1104) is offered as a part of the following programs:
- Indicates programs accepting international students.
School of Energy
- Cybersecurity Analysis for Network Administrators
Microcredential Part-time
Course Offerings
Spring/Summer 2026
Below is one offering of XCSA 1104 for the Spring/Summer 2026 term.
CRN 68165
Dates
Jun 01 - Aug 07 Loading
- CRN 68165
- $222.30 Domestic fees
Class meeting times
| Dates | Days | Times | Locations |
|---|---|---|---|
| Jun 01 - Aug 07 | N/A | N/A | Online |
Duration
10 weeks
Instructor
Hamidreza Talebi
Course outline
Important information
- For questions about this course, please contact the Program Assistant at soepts@bcit.ca. Please include your BCIT student ID (if you have one). Note: BCIT reserves the right to cancel courses. In the event of a course cancellation, you will be notified at least two business days prior to the course start. Please ensure that your contact information is current in your myBCIT.
Confirmation
Required
To proceed with registration and add this course to the cart, please confirm:
Status
If you have any questions about this course, please contact us.
Fall 2026
Below is one offering of XCSA 1104 for the Fall 2026 term.
CRN 49700
Dates
Oct 26 - Dec 29 Loading
- CRN 49700
- $226.83 Domestic fees
Class meeting times
| Dates | Days | Times | Locations |
|---|---|---|---|
| Oct 26 - Dec 29 | N/A | N/A | Online |
Duration
10 weeks
Instructor
TBD
Course outline
Course outline TBD — see Learning Outcomes in the interim.
Important information
- This is a Distance & Online Learning course
Confirmation
Required
To proceed with registration and add this course to the cart, please confirm:
Status
If you have any questions about this course, please contact us.
Programs and courses are subject to change without notice. Find out more about BCIT course cancellations.