IT 285 Forensic Computing

This course teaches how to perform computer crime investigations. The course covers the recovery and analysis of digital evidence, addressing legal and technical issues. Forensic examination techniques of Windows and Unix systems are used to illustrate typical investigative processes.