The main goal of this course is to provide you with a comprehensive understanding of computer forensics and investigation tools and techniques. You will learn what computer forensics and investigation is as a profession and gain an understanding of the overall investigative process. All major personal computer operation system architectures and disk structures will be discussed. You will learn how to set up an investigator's office and laboratory, as well as what computer forensics hardware and software tools are available. You will also learn the importance of digital evidence controls and how to process crime and incident scenes. Finally, you will learn the details of data acquisition, computer forensics analysis, e-mail investigations, image file recovery, investigative report writing, and expert witness requirements. The course provides a range of laboratory and hands-on assignments that teach you about theory as well as the practical application of computer forensics investigation.

Student will be required to demonstrate their knowledge of Computer Forensics through examinations, assigned projects, exercises and the Capstone project. An individualized Capstone project will allow each student to develop an in-debth understanding of a particular aspect of networking and will allow the students to demonstrate his/her ability to apply newly learned skills and concepts to the instructor and his/her classmates.

Lectures and demonstrations covering the above listed material will be further supplemented with hands-on Network Security lessons and labs. Lectures will provide general conceptual overviews and demonstrations of applied concepts and technologies. Projects and assignments will be (to the greatest extent possible) tailored to the participants' needs. Materials from outside sources will be used for added emphasis. All information and material presented in class and through assigned readings are to be considered fair game in any exam.

The examinations will be comprised of questions that test the student’s knowledge of the concepts along with their ability to apply those concepts to real-world networking security issues. The Capstone project will be evaluated on content, form, presentation and the ability of the student to conduct independent analysis, design and implementation. Periodic assignments will be required to demonstrate understanding of the concepts being discussed. Students will be expected to participate and collaborate with their classmates and the course instructor. Attendance at all classes without participation does not warrant a full 10% in the over-all course grade.