Operating System Analysis

DFS 520
Description: In this course, students will examine how operating systems and system user actions determine the types of data available to analyze through digital forensic investigations, discuss the design and behavior of various OS, and learn how to uncover, examine and evaluate forensic artifacts from these systems, at various levels. Students will also learn a variety of current forensic tools and evaluate the features, limitations, and the various levels of data interpretation executed by those tools.

Prerequisite: Complete DFS-501
Credits: 3

Currently Offered