Learn how to conduct data recovery, disc image analysis, and forensic analysis.
Time is TBD
Forensics deals primarily with the recovery and analysis of latent evidence.
If you manage or administer information systems and networks, you should understand computer forensics. Forensics is the process of using scientific knowledge for collecting, analyzing, and presenting evidence to the courts. (The word forensics means “to bring to the court.” ) Forensics deals primarily with the recovery and analysis of latent evidence.
This course will develop knowledge and understanding of advanced forensic computing techniques and equip you with the skills to enable the recovery of admissible evidence from digital media.
Digital forensics practitioners came from a general computer science background, were experienced sysadmins who were comfortable with many of the tools used in digital forensics, or they learned on the job in an apprentice model.
The learner should be familiar with the basics of host discovery, data archives gathering, and analysis.