CSC 317 Forensic Computing

This course will serve as an introduction to forensic investigations in the digital domain. The course will focus on the representation, encryption, storage and retrieval of digital information in modern day computing. Other topics include disk geometry, elementary computer architecture, TCP/IP protocols and the Internet, operating and file system architectures, and file system forensic analysis. Students will learn specific procedures for both internal and external investigations of personal computers, mobile devices and mobile media, consistent with the Good Practice Guide for Computer Based Electronic Evidence, as put forth by the National Hi-Tech Crime Unit (NHTCU) and the Association of Chief Police Officers (ACPO). As part of the course requirements, students will work in a lab setting to investigate and collect evidence from a personal computer obtained through a hypothetical search and seizure.  Prerequisite:  CSC111 or permission of instructor.