CPSC - 6540 Digital Forensics (3)

Provides concepts and theory of file systems and applies them to digital investigations from real cases using analysis tools. Discusses processes and methodologies that an administrator or incident investigator needs to take in order to collect and analyze digital evidence. Topics include data acquisition, file system analysis, incident response methodology, evidence analysis, and incident response tools. Equivalent to CPSC-540.