Cyber Forensics

COURSE DESCRIPTION

Cyber forensics is the application of investigation and analysis techniques to gather and preserve evidence from a particular computing device in a way that is suitable for presentation in a court of law. The goal of computer forensics is to perform a structured investigation while maintaining a documented chain of evidence to find out exactly what happened on a computing device and who was responsible for it.

CERTIFICATION

Investigators use a variety of techniques and proprietary software forensic applications to examine the copy, searching hidden folders and unallocated disk space for copies of deleted, encrypted, or damaged files. Any evidence found on the digital copy is carefully documented in a “finding report” and verified with the original in preparation for legal proceedings that involve discovery, depositions, or actual litigation.

LEARNING OUTCOMES

• Conduct digital investigations that conform to accepted professional standards and are based on the investigative process: identification, preservation, examination, analysis and reporting
• Cite and adhere to the highest professional and ethical standards of conduct, including impartiality and the protection of personal privacy
• Identify and document potential security breaches of computer data that suggest violations of legal, ethical, moral, policy and/or societal standards
• Apply a solid foundational grounding in computer networks, operating systems, file systems, hardware and mobile devices to digital investigations and to the protection of computer network resources from unauthorized activity
• Work collaboratively with clients, management and/or law enforcement to advance digital investigations or protect the security of digital resources
• Access and critically evaluate relevant technical and legal information and emerging industry trends
• Communicate effectively the results of a computer, network and/or data forensic analysis verbally, in writing, and in presentations to both technical and lay audiences