This course introduces state, local, tribal and territorial first responders with limited or no prior knowledge of computer crime and cyber investigations to the importance of identifying evidence related to suspected criminal activity, and how to incorporate the evidence into an investigation. This is an awareness level course that will help first responders reduce cybersecurity risks and response impacts to critical infrastructure.
Students will be introduced to the fundamentals of computer networks and internet technologies. Additionally, students will learn how to identify hardware, software and other digital devices that often contain evidence used in criminal investigations. The focus will be on teaching students how to recognize that an incident has occurred and who to contact about gathering evidence.
While most first responders know computers, tablets and cell phones may contain digital evidence, they may have not been taught how to properly seize and secure digital evidence. Furthermore, first responders may not be aware of other devices or locations where digital evidence may be found. This course will ensure first responders are cognizant of the multiple devices that may contain digital evidence, as well as the many locations, such as email, internet service providers, cloud storage providers, and location data from GPS/ maps on mobile devices stored by software providers.
