This course offers a broad introduction to the forensic investigation of digital devices. We cover the preservation, recovery, harvesting, and courtroom presentation of information from file systems, operating systems, networks, database systems applications, media files, and embedded systems. The primary goal of the class is to understand why and from where information is recoverable in these systems. We also cover relevant issues from criminology, law, and the study of privacy. Students who have completed COMPSCI 365 are not eligible for this course. Graduate students will be expected to read selected current technical and law articles and to implement and analyze state-of-the-art systems. 3 credits.
Taught simultaneously with CS365.