COS 411: Digital Forensics

A study of the concepts, tools, methodologies, and analysis techniques used for host, media, and network forensic investigations. Students will learn how to capture, decipher, reconstruct, and analyze digital data. Prerequisite: COS 121

Cybersecurity Knowledge Areas

Digital Forensics
Host Forensics
Media Forensics
Network Forensics

Coverage

CAE 2014 Topics

Host Forensics (tier 3)
- File Systems and File System Forensics
Media Forensics (tier 3)
- Drive Acquisition
Network Forensics (tier 3)
- Packet Capture and Analysis

CAE 2014 Outcomes

Host Forensics (tier 3)
- Students will be able to describe what can/cannot be retrieved from various OSes.
Media Forensics (tier 3)
- Students will be able to describe methods and approaches for forensic analysis on specified media.
Network Forensics (tier 3)
- Students will be able to describe the methodologies used in network forensics.

ACM 2013 Outcomes

Digital Forensics (tier 3)
- Describe what is a Digital Investigation is, the sources of digital evidence, and the limitations of forensics