MAC 257 — Digital Forensics
This course introduces the methods and technologies relevant to conducting a computer forensic investigation. Topics include collecting, analyzing, recovering, preserving and reporting forensic evidence. Students will learn how to retrieve data from a computer, and recover deleted, encrypted or damaged files; legal considerations and ethics will be covered as well. Various operating systems will be considered including Windows, Macintosh and Linux.