Skip to main content

Introduction to Forensic Evidence Imaging and Acquisition FSCT 7509

Forensic Investigation Course

Subscribe
View cart

Course details

This hands-on course aims to introduce the student to the basics of how to acquire sound forensic evidence from the most common digital devices found today. From laptop/desktop computers, mobile phones, tablets, servers, USB drives, RAID arrays or proprietary CCTV DVR's; each device type often requires a unique combination of techniques and forensic tools to capture a forensic image that can be used for evidentiary purposes.

Prerequisite(s)

  • Admission to a Forensic credential program or permission of the Program Coordinator.

Credits

3.0

Cost

$825.73

Course offerings

Fall 2023

Below is one offering of FSCT 7509 for the Fall 2023 term.

CRN 45033

Duration

Mon Sep 11 - Mon Dec 18 (11 weeks)

  • 11 weeks
  • CRN 45033
  • $825.73
Class meeting times
Dates Days Times Locations
Sep 11 Mon 18:00 - 21:30 Downtown DTC Rm. 372
Sep 18 - Sep 25 Mon 18:00 - 21:30 Online
Oct 16 Mon 18:00 - 21:30 Downtown DTC Rm. 372
Oct 23 - Nov 06 Mon 18:00 - 21:30 Online
Nov 20 Mon 18:00 - 21:30 Downtown DTC Rm. 372
Nov 27 Mon 18:00 - 21:30 Online
Dec 04 Mon 18:00 - 21:30 Downtown DTC Rm. 372
Dec 11 Mon 18:00 - 21:30 Online
Dec 18 Mon 18:00 - 21:30 Downtown DTC Rm. 372
Instructor

Ilia Lvovski

Course outline

Course outline TBD — see Learning Outcomes in the interim.

Cost

$825.73

Important information
  1. Departmental approval needed
  2. Important course information will be sent to you prior to your course start date. Check your myBCIT email account to access this information.
  3. This is a hybrid offering (online and F2F). NO CLASSES: October 2 (Truth and Reconciliation), October 9th (Thanksgiving), and November 13th (Remembrance). Students who have been accepted into a Forensics program where this course is a part of the matrix may register without any further approvals. Students who are not currently accepted in a Forensics program or, if this course is NOT part of your program matrix, please contact the Program Assistants for departmental approval at BCIT_Forensics@bcit.ca. For information on Forensic programs and courses, please visit: www.bcit.ca/cas/forensics. This course will be delivered partially online and partially in-person for 2022 Fall term: IN PERSON Classes (DTC): - October 8 (Saturday, 8:30am - 4pm) - October 29 (Saturday, 8:30am - 4pm) - No classes on October 10 (Thanksgiving Monday) and October 31 (Halloween)
Status

Learning Outcomes

Upon successful completion of the course, the student will be able to:

  • Outline how data is stored and the different types of data storage devices.
  • Outline the various methods that can be employed to create a forensic image from a variety of digital storage devices.
  • Select the best method of forensic evidence collection to be implemented for a given device.
  • Practice removing the physical storage device from a variety of digital devices without compromising the integrity of the host device.
  • Conduct evidence acquisition from both live and dead systems.
  • Conduct RAM acquisition.
  • Execute the acquisition of a complete forensic image using different forensic tools on a variety of devices (tablets, mobile phones, CCTV DVR, Desktop/laptop computer, server).

Effective as of Spring/Summer 2017

Related Programs

Introduction to Forensic Evidence Imaging and Acquisition (FSCT 7509) is offered as a part of the following programs:

School of Computing and Academic Studies

  1. Forensic Investigation (Digital Forensics and Cybersecurity Option)
    Advanced Certificate Part-time
  2. Forensic Investigation (Digital Forensics and Cybersecurity Option)
    Bachelor of Technology Full-time/Part-time

Contact Us

If you have a question or comment about this course, please complete and submit the form below.

  • Privacy Notice: The information you provide will be used to respond to your request for BCIT program information and is collected under Section 26(c) of the Freedom of Information and Protection of Privacy Act (FIPPA). For more information about BCIT’s privacy practices contact: Associate Director, Privacy, Information Access & Policy Management, British Columbia Institute of Technology, 3700 Willingdon Ave. Burnaby, BC V5G 3H2, email: privacy@bcit.ca.
  • This field is for validation purposes and should be left unchanged.

Subscribe

Interested in being notified about future offerings of Introduction to Forensic Evidence Imaging and Acquisition (FSCT 7509)? If so, fill out the information below and we'll notify you by email when courses for each new term are displayed here.

  • Privacy Notice: The information you provide will be used to respond your request for BCIT course information and is collected under Section 26(c) of the Freedom of Information and Protection of Privacy Act (FIPPA). For more information about BCIT’s privacy practices contact: Associate Director, Privacy, Information Access & Policy Management, British Columbia Institute of Technology, 3700 Willingdon Ave. Burnaby, BC V5A 3H2, email: privacy@bcit.ca.

Programs and courses are subject to change without notice.