Introduction to Data Collection and Computer Forensics

Computer Forensics is a cross between technology, investigation and preservation of the digital evidence. This class introduces and explains the basics of how computers work and how forensics can recover hidden data that may make or break your case. Attendees will learn how data is deleted from the hard drive or other digital media. They will also understand that while data has been deleted, it is still recoverable with special software and training. What tools do the computer forensic analysts use? How long does the computer forensics analysis take? We will explore some high profile cases where digital evidence was important and what role it played. The class explores what this means relative to collecting data in a defensible manner and what the data collector should expect in terms of testifying. We will also explore how and when to engage a computer forensics expert for trade secret thefts, criminal defense, mergers and acquisitions, employment law and much more. The class also explains how computer forensics differs from defensible data collection and when an outside vendor should be used for your data collection.