ITH 407
Digital Forensics
2 Unit(s) (LH 30)
Course Description
At the end of this course, students should be able to:
1. explain the origins of forensic science;
2. explain the difference between scientific conclusions and legal decision-making;
3. explain the role of digital forensics and the relationship of digital forensics to traditional
forensic science, traditional science and the appropriate use of scientific methods;
4. outline a range of situations where digital forensics may be applicable and
5. identify and explain at least three current issues in the practice of digital forensic
investigations.
Course Outline
Computer devices, Data collection, Evidence Collection, Extraction and preservation of evidence,
Data Recovery, Evidence preservation, verification & authentication, Data Discovery &
Identification, Data Analysis, Computer Forensics Tools, Data Hiding Techniques, Computer
forensics and mobile forensics.