British Columbia Institute of

Important Notice: COVID-19 Institute response


FSCT 7509 - Introduction to Forensic Evidence Imaging and Acquisition

Forensic Investigation Part-time Studies Course

School of Computing and Academic Studies

BCIT is planning for a substantial return to on-campus activity for the fall 2021 term as informed by BC Public Health Officer guidelines. Refer to each course listing for details.

Course Details

This hands-on course aims to introduce the student to the basics of how to acquire sound forensic evidence from the most common digital devices found today. From laptop/desktop computers, mobile phones, tablets, servers, USB drives, RAID arrays or proprietary CCTV DVR's; each device type often requires a unique combination of techniques and forensic tools to capture a forensic image that can be used for evidentiary purposes.


Admission to a Forensic credential program or permission of the Program Coordinator.





Fall 2021

Below is one offering of this course for the Fall 2021 term.

CRN 45033

Mon Sep 13 - Mon Nov 29 13 Weeks

Class Meeting Times

Dates Days Times Locations
Sep 13 - Oct 04 Mon 18:00 - 21:30 Online
Oct 09 Sat 09:00 - 17:00 DTC DTC Rm. 475
Oct 18 Mon 18:00 - 21:30 DTC DTC Rm. 475
Oct 25 Mon 18:00 - 21:30 Online
Oct 30 Sat 09:00 - 17:00 DTC DTC Rm. 475
Nov 01 Mon 18:00 - 21:30 DTC DTC Rm. 475
Nov 08 Mon 18:00 - 21:30 Online
Nov 15 - Nov 29 Mon 18:00 - 21:30 DTC DTC Rm. 475


Ilia Lvovski

Course Outline

TBD – see Learning Outcomes in the interim




  1. Departmental approval needed
  2. Students who have been accepted into a Forensics program where this course is a part of the matrix may register without any further approvals. Students who are not currently accepted in a Forensics program or, if this course is NOT part of your program matrix, please contact the Program Assistants for departmental approval at For information on Forensic programs and courses, please visit: This course will be delivered partially online and partially in-person for 2021 Fall term: ONLINE Classes: September 13, 20, 27, Oct. 4, 25, Nov. 8 (Mondays, from 6 - 9:30p) IN PERSON Classes (DTC): - October 9 (Saturday, 9am - 5pm) - October 18 (Monday, 6pm-9:30pm - Midterm) - October 30 (Saturday, 9am - 5pm) - November 1 (Monday, 6pm - 9:30pm - class assignment) - November 15 (Monday, 6pm - 9:30pm - Final) No class October 11 (Thanksgiving Monday)

This course offering is in progress. Please check back next term or subscribe to receive email updates.

In Progress

Learning Outcomes

Upon successful completion of the course, the student will be able to:

  • Outline how data is stored and the different types of data storage devices.
  • Outline the various methods that can be employed to create a forensic image from a variety of digital storage devices.
  • Select the best method of forensic evidence collection to be implemented for a given device.
  • Practice removing the physical storage device from a variety of digital devices without compromising the integrity of the host device.
  • Conduct evidence acquisition from both live and dead systems.
  • Conduct RAM acquisition.
  • Execute the acquisition of a complete forensic image using different forensic tools on a variety of devices (tablets, mobile phones, CCTV DVR, Desktop/laptop computer, server).

Effective as of Spring/Summer 2017

Related Programs

FSCT 7509 is offered as a part of the following programs:

School of Computing and Academic Studies

  1. Forensic Investigation (Digital Forensics and Cybersecurity Option)
    Part-time   Advanced Certificate
  2. Forensic Investigation (Digital Forensics and Cybersecurity Option)
    Full-time/Part-time   Bachelor of Technology


Interested in being notified about future offerings of FSCT 7509 - Introduction to Forensic Evidence Imaging and Acquisition? If so, fill out the information below and we'll notify you by email when courses for each new term are displayed here.

Privacy Notice: The information you provide will be used to respond your request related to BCIT course information and is collected under Section 26(c) of the Freedom of Information and Protection of Privacy Act (FIPPA). For more information about BCIT’s privacy practices contact: Associate Director, Privacy, Information Access & Policy Management, British Columbia Institute of Technology, 3700 Willingdon Ave. Burnaby, BC V5A 3H2, email:

Programs and courses are subject to change without notice.

Find Courses

English Language Proficiency

BCIT's Part-time Studies English Language Proficiency Standard is English 12 (or equivalency). Students who do not meet this requirement should upgrade their English skills prior to any future registration.

Payment Changes At BCIT

We've changed the way we accept payments.

Find out more

Course Navigation, Related Links & Tools

Registration News

Registration is now open for the Winter 2022 term.

Classroom Locations

Classroom locations are subject to last minute changes. Please check the Part-time Studies Classroom Locations listing at on the first day of any course you are registered for.

Part-time Studies Financial Aid

Will you be studying at BCIT part-time? Do you need assistance funding your studies? Find out if you qualify for Part-time Studies financial aid.