CET4862 Network Forensics and Incident Response

Course covers identification, recovery and analysis of forensic artifacts from computer and network intrusions. Topics include: incident handling, malware analysis, identifying and recovery evidence of intrusions, data hiding, and identifying network-based attacks. This is a hands-on course that requires prior knowledge of networking and Linux.