CSUF Computer Forensic Evidence Preservation

This class focuses on basic concepts of properly preserving computer, or digital media evidence. You will learn preparation process associated with imaging and storing electronic evidence, how to forensically preview computer media, and the operations of imaging devices such as Forensic Toolkit (FTK) Imager, Encase and Partition Dump (DD). You will gain an understanding of how to verify the integrity of an image file.