COMP6480: Cyber Forensics and Recovery

An introduction to investigations of cyber crime and recovery from cyber incidents. Topics include:

1. An introduction to cyber forensics. Identifying high-value targets and their vulnerabilities.
2. Evidence gathering and chain of custody.
3. Legal and contractual rights and obligations for investigators and suspects.
4. Tools used in cyber investigations.
5. Techniques cyber criminals use to escape detection and how to address them.
6. Presenting expert witness testimony.
7. Investigating social media, email and other forms of electronic communications.
8. Investigating mobile devices and cloud data.

Students will perform multiple tasks illustrating these concepts.