IT 6853 - Computer Forensics

3 Class Hours 0 Laboratory Hours 3 Credit Hours
Prerequisite: IT 6823
This course studies techniques and tools in computing investigation, digital evidence collection, recovery, and analysis. Topics include: Legal issues relating to digital evidence, recover deleted files and discover hidden information, reconstruct user activity from e-mail, temporary Internet files and cached data, assess the integrity of system memory and process architecture to reveal malicious code.