CSEC 112B - Introduction to Applied Windows Forensics

1. Identify Digital Evidence Sources,
2. Collect Digital Evidence,
3. Preserve Digital Evidence,
4. Examine Digital Evidence, and
5. Analyze Digital Evidence Findings.

This course focuses on the Windows operating system and will cover techniques specific to the Windows operating system.

Course was previously offered as CF 117B.

Student Learning Outcomes

1. Demonstrate a working knowledge of the digital forensics investigative process involving Windows-based computers.
2. Describe the legal authority to obtain data and conduct a digital forensic examination.
3. Identify current digital forensics software, hardware, and tools used to complete a digital forensics investigation.
4. Explain various methods of processing data used in digital forensics investigations.
5. Demonstrate a working knowledge of identifying and acquiring Digital Evidence from a computer.
6. Demonstrate the ability to document investigative efforts used in digital forensics investigation.