Forensic Investigation (Digital Forensics and Cybersecurity Option) British Columbia Institute of Technology (BCIT)

Program Description

Some applications of computer forensics are: Investigating and uncovering evidence of illegal activities conducted via computer Investigating crimes by searching for evidence the accused may have stored on computers or data drives, although the crime itself may not have been committed via computer Hacking legally, that is, working for corporations to find and close computer system security holes Training in computer forensics is extremely important in order to understand how to handle the delicate information in storage devices. Technical people may think they know how to extract data; however, they may inadvertently alter or delete important information. Computer forensics practitioners know how to handle information extraction, as well as how to identify information that is useful in a legal case and how to explain and present it in court. Primary responsibilities of computer forensic investigators include: Preserving, identifying, extracting, and documenting evidence stored in computers Searching through documents on a computer for information that will help detectives build their cases, often spending much of their time recovering deleted emails and files Compiling computer evidence for legal cases and working on programs that help recover computer evidence Giving expert testimony when a case comes to trial

Other Programs at the School