CS631 Digital Forensics

This course covers the theory and techniques that one employs to determine the cause of and sequence of events leading up to a security breach in computer systems. This includes the identification of clues and their locations on the offended system, in the associated local network, and into the Internet itself. Techniques to prevent or mitigate such breaches are explored.