IT472 Cybercrime and Digital Forensics

This course covers fundamentals of digital forensics, cybercrime scene analysis and electronic discovery. Digital forensics uses tools and techniques to collect and preserve evidence of computer crimes. Digital forensics focuses on the reconstruction of events that have led to the system corruption, with the goals of recovering critical data, aiding authorities in tracking those who may have caused the security breach, and learning techniques used by hackers to improve the protection of systems and prevent similar breaches in the future. Topics include file systems and storage analysis, data hiding techniques, network forensics; projects involving using, understanding, and designing digital forensic tools; anti-forensics; legal issues and standards.