The latest version of this course is available at:
Computer forensics involves the preservation, identification, extraction and documentation of electronic evidence.
It is a relatively new science that becomes more important as criminals use computers progressively more in their illegal activities.
Computer forensic analysts assist law enforcement, prosecutors, and organizations by identifying, collecting, and documenting evidence consistent with legal guidelines for evidence collection procedures for possible use in a court of law.
- To understand basic issues involved in Computer Forensics
- To utilize different Computer Forensics tools and techniques.
- To learn the rules of Computer Forensics and understand the issues involved in collection and analysis of electronic evidence.
- To prepare proper documentation for successful prosecution of cyber crime.
- Overview of the forensic process
- Legal and ethical implications of forensic analysis
Computer forensic investigative techniques
- Understanding File systems and other relevant operating system concepts
- Obtaining and working on bit stream images
- Mathematical authentication of data
- Decrypting files and retrieving information from password protected files
- Recovering deleted files and data
Presenting Electronic Evidence in Court This section examines the storage, preservation, documentation and presentation of electronic evidence in a court of law.