- International Fees
International fees are typically three times the amount of domestic fees. Exact cost will be calculated upon completion of registration.
Course details
This course introduces students to the scientific principles of digital forensics and provides a good forensic evidence acquisition experience with the most common digital devices found today. Students will learn the fundamental components of a forensic investigation, including proper evidence collection, the chain of custody, and forensic standards for legal evidence. Students will understand how to forensically acquire laptop/desktop computers, mobile phones, Raid arrays and USB drives, as each device type often requires a unique combination of skills, techniques and forensic tools to capture a forensic image that can be used for evidentiary purposes. The course offers a brief introduction to data recovery methods and techniques, which would assist the future investigator in extracting data from non-functioning digital devices.
Prerequisite(s)
- Admission to a Forensic credential program or permission of the Program Coordinator.
Credits
3.0
- Not offered this term
- This course is not offered this term. Please check back next term or subscribe to receive notifications of future course offerings and other opportunities to learn more about this course and related programs.
Learning Outcomes
Upon successful completion of the course, the student will be able to:
- Describe the structure and components of digital devices related to digital forensics.
- Explain the overall flow and structure of a digital forensic investigation.
- Explain how information is stored and extracted from different types of data storage devices.
- Identify Windows/Mac computer-based artifacts.
- Perform Initial data recovery procedures.
- Select the best method of forensic evidence collection to be implemented for a given device.
- Execute the acquisition of a complete forensic image using different forensic tools on a variety of devices (tablets, mobile phones, Desktop/laptop computers, RAID arrays, Flash-based devices).
- Conduct RAM acquisition.
- Prepare and present detailed, court-acceptable notes outlining every step in the acquisition process.
Effective as of Winter 2024
Related Programs
Introduction to Digital Forensics and Evidence Imaging (FSCT 7509) is offered as a part of the following programs:
- Indicates programs accepting international students.
- Indicates programs with a co-op option.
School of Computing and Academic Studies
- Forensic Investigation (Digital Forensics and Cybersecurity Option)
Advanced Certificate Part-time
- Forensic Investigation (Digital Forensics and Cybersecurity Option)
Bachelor of Technology Full-time/Part-time
Contact Us
If you have a question or comment about this course, please complete and submit the form below.
Subscribe
Interested in being notified about future offerings of Introduction to Digital Forensics and Evidence Imaging (FSCT 7509)? If so, fill out the information below and we'll notify you by email when courses for each new term are displayed here.
Programs and courses are subject to change without notice.