Computer Forensics

This course introduces students to the principles, tools, and methodologies of computer forensics — the process of identifying, preserving, analyzing, and presenting digital evidence in a legally defensible manner. Students will gain hands-on experience with forensic software and investigative techniques used to examine desktops, laptops, mobile devices, and network environments. Key topics include: Fundamentals of digital evidence and chain of custody File systems, operating systems, and data recovery methods Forensic imaging and preservation of evidence Analyzing email, web activity, and registry artifacts Investigating malware, insider threats, and cybercrimes Mobile device and cloud forensics Legal considerations, reporting, and expert testimony By the end of the course, students will understand how to conduct forensic investigations systematically, apply appropriate tools to uncover hidden or deleted information, and prepare findings for legal or organizational review. This course is ideal for those pursuing careers in cybersecurity, digital forensics, law enforcement, or IT incident response.