CAT 310 - Introduction to Digital Forensics

Course Description

This course provides students with foundational skills for computer operations at a high level, including memory storage, operating systems, and event logs. The course covers the principles, tools, and techniques used to identify, collect, analyze, and preserve digital evidence in cybersecurity incidents.

Course Details

Learning Outcomes

By the completion of this course, successful students will be able to:

• Conduct basic digital forensic investigations
• Use digital tools for evidence collection and analysis
• Explain legal and ethical considerations in digital forensics
• Preserve digital evidence for court proceedings

Course Components:

• Lectures (Theory Component):
• Principles of Digital Forensics and Investigation
• Understanding File Systems and Memory Storage
• Introduction to Operating Systems and Event Logs
• Legal Considerations in Digital Forensics

Cyber Range-Based Labs (Hands-On Component):

• Using Digital Tools for Evidence Collection
• Analyzing Digital Artifacts (Registry Files, Event Logs)
• Preserving Digital Evidence (Hashing, Chain of Custody)