This hands-on course aims to introduce the student to the basics of how to acquire sound forensic evidence from the most common digital devices found today. From laptop/desktop computers, mobile phones, tablets, servers, USB drives, RAID arrays or proprietary CCTV DVR's; each device type often requires a unique combination of techniques and forensic tools to capture a forensic image that can be used for evidentiary purposes.
Admission to a Forensic credential program or permission of the Program Coordinator.
This course isn't currently offered through BCIT Part-time Studies. Please check back next term or subscribe to receive email updates.
Upon successful completion of the course, the student will be able to:
Outline how data is stored and the different types of data storage devices.
Outline the various methods that can be employed to create a forensic image from a variety of digital storage devices.
Select the best method of forensic evidence collection to be implemented for a given device.
Practice removing the physical storage device from a variety of digital devices without compromising the integrity of the host device.
Conduct evidence acquisition from both live and dead systems.
Conduct RAM acquisition.
Execute the acquisition of a complete forensic image using different forensic tools on a variety of devices (tablets, mobile phones, CCTV DVR, Desktop/laptop computer, server).
Effective as of Spring/Summer 2017
FSCT 7509 is offered as a part of the following programs:
Interested in being notified about future offerings of FSCT 7509 - Introduction to Forensic Evidence Imaging and Acquisition?
If so, fill out the information below and we'll notify you by email when courses for each new term are displayed here.