CJST 4533 - Cyber Forensics Evidence Laboratory

Prerequisite: CJST 4524. Computer forensics is the practice of determining what past actions have taken place on a computer or electronic device. Using forensic techniques and software, we can uncover and preserve the artifacts that provide the evidence of crimes and activities such as theft of data, improper computer use and virus or malware attacks. This course is an introduction to where these key pieces of data are located and how they can be recovered. Students are also introduced to popular forensic software tools such as EnCase, FTK, Helix, WinHex, RegRipper, and others. 3 credits.