CPSC 5680 - Computer Forensics

(3) Credit Hours

Procedures for identification, preservation, and extraction of electronic evidence. Auditing and investigation of network and host system intrusions, analysis and documentation of information gathered, and preparation of expert testimonial evidence will also be covered. Also, forensic tools and resources for system administrators and information system security officers will be explored. Prerequisites: CPSC 5020 and 5030 or equivalents. Supplementary course fee assessed.