CYB 4153 Digital Forensics

Three hours (On Campus and Online)

This course focuses on the recovery and investigation of material found in digital devices, often in relation to computer crimes. Students will learn how to gather, preserve, and analyze digital evidence in a manner that is legally sound and scientifically rigorous. Key topics include file system analysis, memory forensics, and network forensics, along with an understanding of legal issues, including chain of custody and admissibility of evidence in court. The course places a strong emphasis on using industry-standard tools and techniques to conduct forensic investigations. Students will explore case studies involving real-world incidents such as data breaches, insider threats, and cyber fraud, learning how to uncover and interpret hidden evidence. Additionally, students will be taught how to create reports that can be used in both internal investigations and legal proceedings. By the end of the course, students will be adept at using forensic methodologies to investigate digital crimes and security incidents. They will have the knowledge and skills to assist in legal investigations, working alongside law enforcement or within corporate environments. An additional fee may be associated with this course.

Prerequisite: CS 3213
Offered on campus Fall semester
Offered online Fall term