Prerequisite(s): ITN 106 and ITN 107. Corequisite(s): ITN 260. Teaches computer forensic investigation techniques for collecting computer-related evidence at the physical layer from a variety of digital media, (hard drives, compact flash, and PDAs) and performing analysis at the file system layer. Lecture 3 hours per week.