CAT 310 - Introduction to Digital Forensics
Course Description
This course provides students with foundational skills for computer operations at a high level, including memory storage, operating systems, and event logs. The course covers the principles, tools, and techniques used to identify, collect, analyze, and preserve digital evidence in cybersecurity incidents.
Course Details
Learning Outcomes
By the completion of this course, successful students will be able to:
- Conduct basic digital forensic investigations
- Use digital tools for evidence collection and analysis
- Explain legal and ethical considerations in digital forensics
- Preserve digital evidence for court proceedings
Course Components:
- Lectures (Theory Component):
- Principles of Digital Forensics and Investigation
- Understanding File Systems and Memory Storage
- Introduction to Operating Systems and Event Logs
- Legal Considerations in Digital Forensics
Cyber Range-Based Labs (Hands-On Component):
- Using Digital Tools for Evidence Collection
- Analyzing Digital Artifacts (Registry Files, Event Logs)
- Preserving Digital Evidence (Hashing, Chain of Custody)