FSIS 642 File System Forensic Analysis

3 credits

This course prepares the student with a thorough knowledge of file system structures and the ability to analyze digital evidence found in the various implementations of FAT, NTFS, EXT3 file systems as well as other disk allocation structures. This knowledge and associated skill is essential for a complete understanding of evidence imaging and analysis required for providing testimony in a court of law as an expert in the field of computer forensics.

Prerequisite(s): FSIS 600 OR a passing score on the FSIS 600 Assessment Exam OR approval of the program coordinator.