UMBC Center for Information Security and Assurance

Applied Digital Forensics - CYBR 631

Course Description

This course will introduce students to digital forensics as practiced by local, state, and federal law enforcement. Assignments will reinforce theory presented in lecture while providing students with hands-on experience with using well known, publicly available, digital forensic tools. Skills covered include the use of well-known digital forensic tools, logical and physical imaging of digital evidence, the application of cryptographic hash functions to identify files, protecting digital evidence, organizing evidence for analysis, and carving (recovering) deleted data. Digital evidence obtained from computer hard drives as well as removable media (USB thumb drives and CD/DVDs) will be considered.

Prerequisites: CYBR 620

Previous Offerings

  • Spring 2012 (Leschke)