DFS 520 - Operating System Analysis

In this course, students will examine how operating systems and system user actions determine the types of data available to analyze through digital forensic investigations, discuss the design and behavior of various OS, and learn how to uncover, examine and evaluate forensic artifacts from these systems, at various levels. Students will also learn a variety of current forensic tools and evaluate the features, limitations, and the various levels of data interpretation executed by those tools.
Prerequisites Complete DFS-501
Credit(s): 3