Digital Forensics and Incident Response

Course Overview

The course will introduce computer and network forensics as applied to cyber security and data analysis of a system intrusion. We will explore methods of attack and the tools available to conduct forensics investigations. Students will be exposed to Security Information and Event Management (SIEM) tools that enable sophisticated analysis of complex networks ranging from enterprise systems to mobile systems. The course will focus on forensics theory, the forensics process, and laboratory investigations with modern SIEM tools. Outcomes include solid understanding of modern network analytics, defenses, and approaches to discovery of data needed to conduct the evidence needed for intrusion affirmation cases

Frequently Asked Questions

Is it true you offer the MS in Cyber Security Engineering online for students in India? What is the difference?

Yes! We are proud to offer the MS in Cyber Security Engineering from the Shiley-Marcos School of Engineering to students who wish to study online in India. These students will get the same credential as an on-campus student or an online student in the US. The curriculum is just as rigorous and holistic as it is on campus, however it is globalized for the Indian audience so that the coursework applies to both Indian and the international job markets. In addition, to minimize language and cultural barriers the instructors are all from India and hired at the same standard as our campus faculty – with real-world experience and impressive academic backgrounds.

How should I prepare for a cybersecurity internship interview?

Think of an internship as a job interview. Research the company or organization ahead of time and practice interviewing with a friend or family member. (You can find plenty of internship interview questions online.) Whether the interview is in person or remote, dress appropriately and arrive on time. Also, remember to be polite and come prepared with your own questions.

Can I get a remote cybersecurity internship?

Remote and hybrid positions are available. For example, Chegg Internships has a section dedicated solely to remote internships across all industries.

Do I need coding experience for a cybersecurity internship?

In most cases, no, but more advanced internships may require this type of experience. Either way, the internship requirements should be clear on the position’s listing.

Which company is the best for a cybersecurity internship?

There is no one right answer — it depends on your career goals, interests and the type of internship you’re looking for. Do your research and see if you can find reviews of an internship program, or talk with other students, colleagues or professors who may be able to recommend a particular company or organization.

What is the average compensation for a paid internship?

The compensation for paid internships will vary. Many companies offer an hourly or weekly rate, which should be included with the internship posting. If it isn’t, and the position is advertised as a paid one, it’s best to obtain the compensation in writing before signing on.

What kind of education do I need to work in cyber incident response?

In most cases, you need a bachelor’s degree in information technology, computer science, cybersecurity, computer forensics or a related field. Employers typically prefer 2-3 years of experience in the field. Senior roles may require a master’s degree.

What kinds of careers are available in cyber incident response?

The short answer — many. A few examples include:

Cybersecurity Specialist
Cybersecurity Analyst
Cybersecurity Consultant
Incident Response Manager
Incident Response Analyst
Threat Detection Analyst
Ethical Hacker

What should go into an incident response plan?

Important components of an incident response plan should include main points of contact, key players and their roles and responsibilities, a step-by-step incident response process, business contingency details and information on how this incident will be communicated to consumers, employees, stakeholders, law enforcement, etc.

What is the cost of an average cyber incident?

There are varying answers, but according to a recent report from IBM, the cost of a data breach in the United States is $9.44 million — compared with $4.35 million, which is the global average.

What is cyber incident response?

Cyber incident response refers to how a company or organization responds to a breach or cyber attack.

Academic Advising

Our cybersecurity programs have Academic Advisors, they are responsible for evaluating applications and admitting new students, monitoring your academic progress and providing guidance as needed. To connect with a program expert, please don’t hesitate to contact our team at (888) 832-0239 or use the chat feature on this page.

Virtual Information Session

Join us for a live webinar where we breakdown most frequently asked questions about our MS Cyber Security Engineering program. You will have to opportunity to ask any questions you might have as you hear from our Academic Director, Chuck Bane, and our program expert/enrollment advisor, Tom Cardosi. RSVP link to come.

Virtual Coffee Chats

Want to learn more about our program and be able to ask questions face to face? Join us for one of our virtual coffee chats with a program expert. More details to come!

Are classes scheduled to accommodate working professionals?

Yes. The Master of Science in Cyber Security Engineering degree program is designed specifically with working professionals in mind, offering both on-campus and online options for maximum convenience.

The online program can be completed on your own schedule (as long as deadlines are met). The on-campus program typically meets twice a week (Monday and Wednesday, or Tuesday and Thursday) with classes scheduled after 6 p.m.

It is important to note that all of our professors are industry practitioners, meaning that they have a significant amount of experience and are often well-respected leaders within the cybersecurity industry.

How long does it take to complete the program?

The program is designed to be completed in 20 months.

Does the program have to be completed within 20 months?

The curriculum schedule functions on a rotational system, meaning that if a student skips a course they will have to wait for the rotation to complete before jumping back in. We encourage individuals who are interested in the program to speak with an enrollment advisor or to work with their program coordinator, who is available to help every step of the way.

How long is each course?

Each course lasts a total of seven weeks with the only exception being introductory courses, which are 14 weeks. Students take two courses each semester, focusing intensively on one course at a time.

Does the program require applicants to take the GRE or GMAT?

No. The admissions committee takes a comprehensive approach when reviewing applications. A GRE or GMAT score is not necessarily a good indicator that someone is, or will be, a successful cybersecurity engineer.

Who will benefit the most from this program?

This advanced degree program was designed specifically to help train the next generation of cybersecurity engineers.

For those already working in cybersecurity and looking to take the next step in their career, this is an academically rigorous program — including hands-on coursework utilizing a virtualized Cybersecurity Sandbox — that will prepare you for more advanced positions within the field of cybersecurity engineering.

For students with less experience, who may be at an earlier juncture in their professional career, or for those switching careers from more traditional IT roles, our this program offers a strong and comprehensive foundation, allowing you to quickly advance into your desired career.

View All FAQs

Request More Info