CAP2140 Digital Forensics 1 (AS)
Prerequisites: CNT2402, CTS2120 (with a grade of C or higher).
This course presents computer forensics in today's world and explores its vital role in gathering and preserving evidence from digital devices. Beyond general information about the field, the course delves into physical security needs, evaluation of equipment needs, tools, terminology of information security, and understanding the investigation process, responder procedures, incident handling and creating reports to present for court cases. Students will gain an in-depth understanding of the tools and techniques used by computer forensics experts, such as analysis of file structures, evidence imaging, data recovery, e-mail investigations, password recovery and decryption of encrypted data.