DFS 560 - Digital Forensic Triage

As the volume of data requiring analysis continues to grow exponentially early approaches of examining every byte of data a re no longer feasible. This course will examine different approaches used to perform rapid assessment of devices containing potential evidence. Different models, the use of automated processes (using scripts) and different tools will be discussed. Particular attention will be paid to the risks and benefits of triage type approaches.
Prerequisite(s): DFS-510, DFS-530, DFS-550, DFS-520
Credit(s): 3