Digital Forensics

Course Number: 

INFOSEC 690D

Dates: 

1/23/2018 - 3/15/2018

Time: 

6:00pm - 8:00pm

Room: 

UMCS 005

Program Type: 

Academic

Day: 

Tuesday
Thursday
Credits: 3 The goal of forensics is to gather artifacts for refinement into evidence that supports or refutes a hypothesis about an alleged crime or policy violation. Done correctly, forensics represents the application of science to law. This course is a broad introduction to the practical techniques used in the forensic investigation of digital information and devices. We will cover the acquisition, analysis, and courtroom presentation of information from file systems, operating systems, networks, cell phones, and the like. Students do not need experience with these systems. We will cover the professional use of tools that allow for data harvesting, with a dive into why and from where artifacts are recoverable in these systems. Assignments involve using these tools in practical scenarios and gaining an understanding why raw data can be turned into information and evidence reliably. Forensics investigation of of infiltration will be covered as well, including tasks such as the recovery of malware from memory.