- International Fees
International fees are typically 3.25 times the domestic tuition. Exact cost will be calculated upon completion of registration.
Course Overview
This course introduces students to the scientific principles of digital forensics and provides a good forensic evidence acquisition experience with the most common digital devices found today. Students will learn the fundamental components of a forensic investigation, including proper evidence collection, the chain of custody, and forensic standards for legal evidence. Students will understand how to forensically acquire laptop/desktop computers, mobile phones, Raid arrays and USB drives, as each device type often requires a unique combination of skills, techniques and forensic tools to capture a forensic image that can be used for evidentiary purposes. The course offers a brief introduction to data recovery methods and techniques, which would assist the future investigator in extracting data from non-functioning digital devices.
Prerequisite(s)
- Admission to a Forensic credential program or permission of the Program Coordinator.
Credits
3.0
Domestic fees
$886.57
Learning Outcomes
Upon successful completion of the course, the student will be able to:
- Describe the structure and components of digital devices related to digital forensics.
- Explain the overall flow and structure of a digital forensic investigation.
- Explain how information is stored and extracted from different types of data storage devices.
- Identify Windows/Mac computer-based artifacts.
- Perform Initial data recovery procedures.
- Select the best method of forensic evidence collection to be implemented for a given device.
- Execute the acquisition of a complete forensic image using different forensic tools on a variety of devices (tablets, mobile phones, Desktop/laptop computers, RAID arrays, Flash-based devices).
- Conduct RAM acquisition.
- Prepare and present detailed, court-acceptable notes outlining every step in the acquisition process.
Effective as of Winter 2024
Related Programs
Introduction to Digital Forensics and Evidence Imaging (FSCT 7509) is offered as a part of the following programs:
- Indicates programs accepting international students.
- Indicates programs eligible for students to apply for Post-graduation Work Permit (PGWP).
School of Computing and Academic Studies
- Forensic Investigation (Digital Forensics and Cybersecurity Option)
Advanced Certificate Part-time
- Forensic Investigation (Digital Forensics and Cybersecurity Option)
Bachelor of Technology Full-time/Part-time
Course Offerings
Fall 2025
Below is one offering of FSCT 7509 for the Fall 2025 term.
CRN 45033
Dates
Sep 04 - Nov 27 Loading
- CRN 45033
- $886.57 Domestic fees
Class meeting times
| Dates | Days | Times | Locations |
|---|---|---|---|
| Sep 04 - Sep 11 | Thu | 18:00 - 21:30 | Burnaby SE12 Rm. 318 |
| Sep 18 - Oct 02 | Thu | 18:00 - 21:30 | Online |
| Oct 09 - Oct 23 | Thu | 18:00 - 21:30 | Burnaby SE12 Rm. 318 |
| Oct 30 | Thu | 18:00 - 21:30 | Online |
| Nov 06 | Thu | 18:00 - 21:30 | Burnaby SE12 Rm. 318 |
| Nov 13 | Thu | 18:00 - 21:30 | Online |
| Nov 20 - Nov 27 | Thu | 18:00 - 21:30 | Burnaby SE12 Rm. 318 |
Duration
13 weeks
Instructor
Ilia Lvovski
Course outline
Course outline TBD — see Learning Outcomes in the interim.
Important information
- Departmental approval needed
- Important course information will be sent to you prior to your course start date. Check your myBCIT email account to access this information.
- International fees are typically 3.25 times the domestic tuition. Exact cost will be calculated upon completion of registration.
- This is a hybrid offering (online and F2F). Students who have been accepted into a Forensics program where this course is a part of the matrix may register without any further approvals. Students who are not currently accepted in a Forensics program or, if this course is NOT part of your program matrix, please contact the Program Assistants for departmental approval at BCIT_Forensics@bcit.ca.
Status
Programs and courses are subject to change without notice.