Course Description

Digital forensics encompasses the recovery and investigation of material found in digital devices, often in relation to computer crime. The term digital forensics was originally used as a synonym for computer forensics but has expanded to cover investigation of all devices capable of storing digital data.

Digital forensics investigations have a variety of applications. The most common is to support or refute a hypothesis before criminal or civil proceedings. Digital forensics may also use in the private sector, such as internal corporate investigations or intrusion investigation.

The technical aspect of digital forensics and investigation is divided into several areas, relating to the type of digital devices involved, namely computer forensics, network forensics, forensic data analysis and mobile device forensics. The typical forensic process includes the seizure, forensic imaging (acquisition) and analysis of digital media and the production of a report.