This course will introduce the student to digital forensic tools and techniques as they apply to the four phases of the digital investigation:


•Seizure

•Acquisition

•Analysis

•Reporting

The focus will be on open source tools. The students will image a device and apply data integrity and mining tools.


Students will use DD and Netcat for data acquisition, Autopsy/Sleuth Kit for data mining, and Scalpel for data carving. Also a collection of live forensic tools will be looked at.


A survey of mobile device tools and techniques and their special issues will be introduced.
The students should gain a basic understanding of forensic tools and techniques and be able to recover data from some compromised storage devices.