CET4862 Network Forensics and Incident Response

Course covers identification, recovery, and analysis of forensic artifacts from computer and network intrusions. Topics include: incident handling, malware analysis, identifying, and recovery evidence of intrusions, data hiding, and identifying network-based attacks. This is a hands-on course that requires prior knowledge of networking and Linux.