This hands-on course aims to introduce the student to the basics of how to acquire sound forensic evidence from the most common digital devices found today. From laptop/desktop computers, mobile phones, tablets, servers, USB drives, RAID arrays or proprietary CCTV DVR's; each device type often requires a unique combination of techniques and forensic tools to capture a forensic image that can be used for evidentiary purposes.
Prerequisite(s)
Admission to a Forensic credential program or permission of the Program Coordinator.
This course is for students accepted into a Forensic Science & Technology Program. For approval to register, please contact the Forensics Program Assistant, Julia Dreyer at jdreyer@bcit.ca. For more information about Forensics programs, please visit our department website at bcit.ca/forensics .
Status
Four seats remaining as of Aug 15, 2018 5:46 pm PDT. Seats remaining may change at any time prior to registration and payment.
Learning Outcomes
Upon successful completion of the course, the student will be able to:
Outline how data is stored and the different types of data storage devices.
Outline the various methods that can be employed to create a forensic image from a variety of digital storage devices.
Select the best method of forensic evidence collection to be implemented for a given device.
Practice removing the physical storage device from a variety of digital devices without compromising the integrity of the host device.
Conduct evidence acquisition from both live and dead systems.
Conduct RAM acquisition.
Execute the acquisition of a complete forensic image using different forensic tools on a variety of devices (tablets, mobile phones, CCTV DVR, Desktop/laptop computer, server).
Effective as of Spring/Summer 2017
Related Programs
FSCT 7509 is offered as a part of the following programs:
Interested in being notified about future offerings of FSCT 7509 - Introduction to Forensic Evidence Imaging and Acquisition?
If so, fill out the information below and we'll notify you by email when courses for each new term are displayed here.
Classroom locations are subject to last minute changes. Please check the Part-time Studies Classroom Locations listing at www.bcit.ca/rooms on the first day of any course you are registered for.