Transfers ToCSUDescriptionThis course covers computer forensics fundamentals, providing an overview of computer forensic types, techniques, their electronic evidence and capture. Students learn a systematic approach to conducting a computer forensics investigation, both a law enforcement and a corporate investigation. They also investigate the requirements of a computer forensics lab including data recovery workstations, hardware and software and what is required to certify a computer forensics lab. They will learn how to collect evidence at private-sector incident scenes as well as at a crime scene using state-of-art data acquisition tools. The course also covers the purpose and structure of file systems such as New Technology File System (NTFS) as well as methods for validating and testing computer forensics tools. 