Courses

This is a high-level course designed for managers who need to have an understanding of computer forensics and for IT security administrators and/or incident handlers who would support a computer forensics investigation. Much of the course is spent on lab exercises, using appropriate computer forensics applications and working through case studies.

• An overview of computer forensics
• Computer forensics in the IT security life cycle: Prevention, Detection, Analysis, Response, Recovery (P-DARR)
• Building a departmental computer forensics capability
• Computer forensics technology and systems architectures
• Computer forensics methodology
• Available resources, including the CSE documentation for the GoC computer forensics

Recommended preparation: Course S33 - Introduction to Information Technology Security: The Management and Technology of Cyber Protection and Course 360 - Information Infrastructure Protection (IIP): Technical Framework.

NOTE: This course is closely related to the subject-matter of Course 360 (IIP). It is highly recommended that it be taken after Course 360.