BCIT is planning for a substantial return to on-campus activity for the fall 2021 term as informed by BC Public Health Officer guidelines. Refer to each course listing for details.
Students will learn how to identify, collect, and preserve digital evidence with an emphasis on evidence collected from the Windows operating system. Topics include fundamental computer forensics principles, information extraction, legal issues, and challenges posed by variations in both data sources and devices. Students will use specialized forensic software to collect and use evidence in a forensically sound manner, to support an investigation.
Synchronous learning. Students who have been accepted into a Forensics program where this course is a part of the matrix may register without any further approvals. Students who are not currently accepted in a Forensics program or, if this course is NOT part of your program matrix, please contact the Program Assistants for departmental approval at BCIT_Forensics@bcit.ca. For information on Forensic programs and courses, please visit: https://www.bcit.ca/cas/forensics.
Upon successful completion of this course, the student will be able to:
Outline fundamental principles of computer forensics.
Preserve digital evidence.
Extract data from computers running the Windows operating system.
Use forensic software and techniques to analyse digital evidence.
Locate and identify required evidence in different investigative scenarios.
Assess legal issues around evidence collection, presentation and jurisdiction.
Effective as of Winter 2018
FSCT 8513 is offered as a part of the following programs:
Interested in being notified about future offerings of FSCT 8513 - Digital Forensics 1?
If so, fill out the information below and we'll notify you by email when courses for each new term are displayed here.