The Digital Forensics profession includes the acquisition of electronic evidence from storage media, analysis of that evidence (whether it be pc-based or mobile device-based) and understanding the legal issues surrounding Digital Forensics. The study of digital forensics is a growing field for both law enforcement as well as corporate employees. Whether you want to be a criminal investigator or recover digital assets for the private sector, people best suited for this profession are: patient, detail oriented, and comfortable with the idea of writing reports.
The course is designed to give you a solid understanding of digital forensics by allowing you to analyze and solve casework similar to real world cases in digital forensics.
- Understand NTFS and FAT Operating Systems
- Develop sound evidence for presentation in court
- Manage evidence in a safe and acceptable fashion.
Requirements in the Certificate in Digital Forensics
|SEC||320||Digital Forensics I|
|SEC||400||Forensic Hardware and Acquisition|
|SEC||420||Digital Forensics II|
|SEC||421||Digital Forensics III|
|SEC||450||Law for Networking, Security and Forensics Professionals|
SEC 320 – Digital Forensics I
Prerequisite: SEC 200 or permission of instructor This course introduces students to techniques used in law enforcement and corporate litigation to recover and examine electronic media in a forensically sound fashion. The course includes the use of commercial forensics packages and the development of full analysis of media for presentation to corporate security officers, law enforcement, or the legal system. Students will learn to examine hardware, maintain chain of custody, create forensic images, analysis forensic images, and develop analytical reports for presentation. The course is typically offered online but has hands on lab components. (3 credits) Fall
SEC 400 – Forensic Hardware and Acquisition
Prerequisite: SEC 100 or permission of instructor This course focuses on both configuration and management of networked platforms from a troubleshooting perspective. Students are expected to install and manage a variety of operating systems to simulate a working network in a production environment. The course was designed with security and forensics professionals in mind. This course is typically offered online. (3 credits) Fall
SEC 420 – Digital Forensics II
Prerequisite: SEC 320 or permission of instructor; SEC 400 (may be taken simultaneously) This course focuses on complete understanding of the operating systems approach to file storage and management for digital forensics recovery. The course solves casework using low level recovery and manual recovery of deleted files and continues to concentrate on the presentation of cases in both written and verbal formats. Students will complete typical forensics casework. The course is typically offered online. Spring
SEC 421 – Digital Forensics III
Prerequisite: SEC 420 or permission of instructor This focuses on the understanding of the cell phones, cameras, and other hand held devices which are commonly found in forensics casework but require special handling due to their proprietary nature. The course includes work on actual cell phones and PDA as well as special handling techniques necessary to preserve evidence in these cases. Specific topics may vary as technology changes. The course is typically offered online. (3 credits) Summer
SEC 450 – Law for Networking, Security and Forensic Professionals
Prerequisite: SEC 350 & Junior Standing This course specifically focuses on rights, ethics, and policy in accordance primarily with US law in terms of the practice of digital forensics and security. Discussions include areas of law which may specifically apply to forensics or networking/security professionals (e.g. 4th Amendment, Evidence, International law,) and other legal areas which typically have an impact on a digital case. This course may be offered online. (3 credits) Spring