Computer Forensics and Investigation

This course introduces students to the principles and practices of digital forensics and investigation. Students will learn how to identify, acquire, preserve, and analyze digital evidence using industry tools and techniques. Topics include forensic methodology, evidence handling, file system and operating system analysis, event log collection, and forensic triage. Student will also explore the integration of forensic investigations into security operations, including SIEM log analysis and incident response procedures. Emphasis is placed on professional conduct, chain of custody, and the ability to communicate forensic findings clearly in written reports.