Back to Course List

Digital Forensics and Incident Response

Course Description

The course will introduce computer and network forensics as applied to cyber security and data analysis of a system intrusion. We will explore methods of attack and the tools available to conduct forensics investigations. Students will be exposed to Security Information and Event Management (SIEM) tools that enable sophisticated analysis of complex networks ranging from enterprise systems to mobile systems. The course will focus on forensics theory, the forensics process, and laboratory investigations with modern SEIM tools. Outcomes include solid understanding of modern network analytics, defenses, and approaches to discovery of data needed to conduct the evidence needed for intrusion affirmation cases

Units

3 units