INVS 6681 - Computer Device Investigations

A comprehensive study of the sources of evidence on and generated by laptop and desktop computers as well as commonly encountered removable media.  This course focuses on the proper investigative methodology for the examination of computer systems including proper collection, drive/media imaging, analysis, and reporting.  Students will be introduced to hardware and software frequently used in criminal and civil investigations of computer systems as well as the various operating systems and artifacts encountered, with a focus on Windows, macOS, and Chrome OS. 3 credits.