LEARNING OBJECTIVES

Upon completion of this course the student will be able to:

• Discuss the rules, laws, policies, and procedures that affect digital forensics;
• Perform the steps included in a digital investigation from the initial recognition of an incident through the steps of evidence gathering, preservation and analysis, and the completion of legal proceedings;
• Write professional quality reports that include both a summary report and a notes section, which describes the technical procedures used in the investigation;
• Identify important file metadata and apply their use in a forensic investigation; and
• Perform a forensic investigation on a forensic image, using various tools to recover evidence, resulting in a report documenting the investigation