This course develops expertise in the forensic examination of both Client and Server machines. The course consists of an academic discussion of Networks and how they operate followed by practical hands-on development of a Network from the point of view of a small business. Starting from a stand alone machine students will build a working network via crossover connection to the use of switches on a small network to a full-blown domain with controller. Forensic artefacts and methods of recovery for evidential purposes are discussed and practically experienced along the way. Examinations/analysis are carried out on prepared hard disks with suitable scenarios.
If you have been a student on this course, please feel free to leave your comments below.