CCT 240 Data Recovery Techniques

Lecture: 2 Lab: 3 Clinic: 0 Credits: 3

This course introduces the unique skills and methodologies necessary to assist in the investigation and prosecution of cyber crimes. Topics include hardware and software issues, recovering erased files, overcoming encryption, advanced imaging, transient data, Internet issues and testimony considerations. Upon completion, students should be able to recover digital evidence, extract information for criminal investigation and legally seize criminal evidence.

Course is typically offered in Fall.
Course has transfer restrictions - 10 years

Student Learning Outcomes (SLOs)
At completion of the course, the student should be able to do the following:

Capture erased data from a hard drive.
Explore encryption methods used to secure digital devices.
Extract encrypted data from secure digital devices.
Discover hidden files in digital media.