CS 635 Digital Forensics
A prerequisite to CS 645
In this course, students will learn how to understand and differentiate between file systems and operating systems; explain in detail the FAT file system; be exposed to the NTFS file system; identify Windows artifacts and registry artifacts; understand hashing and its uses in digital forensics; understand Fourth Amendment considerations when searching and seizing digital evidence (per CT law) chain of custody; use hardware write blockers, varieties, and uses; perform data acquisitions using methods and tools discussed in class; perform basic data recovery; understand file signatures and its uses; and understand risk assessment.
Prerequisite
CS 505 Computer Networks (or permission of department)