CYBR 671 Digital Forensics I

This course explores digital forensic methodologies, legal considerations, and investigative techniques used in modern forensic analysis. Students will develop the expertise to analyze forensic images, identify suspicious or concealed files¿including those hidden through steganography and data obfuscation¿and implement advanced strategies for evidence recovery across diverse digital environments, including Windows, macOS, smartphones, memory, and network systems. Emphasizing the use of cutting-edge forensic tools and bootable utilities, students will learn to extract and preserve digital evidence while maintaining data integrity. The course also examines contemporary methods used for hiding, encrypting, and scrambling data, equipping students with the skills to develop effective countermeasures in forensic investigations. Additionally, students will gain proficiency in preparing legally admissible documentation, maintaining a proper chain of custody, and drafting forensic reports that meet evidentiary standards. Emphasis is placed on effectively communicating findings through technical reports and courtroom presentations, ensuring clarity, precision, and compliance with legal protocols.

Prerequisites

• CYBR 641: Cyber Operations Fundamentals

Special information

First day attendance is mandatory.
Prerequisites: Graduate standing. Note: Students are responsible to both be aware of and abide by prerequisites for CYBR courses for which they enroll, and will be administratively dropped from a course if they have not met prerequisites.