This course examines advanced technical aspects of digital computer evidence to include detection, collection, identification, and preservation. Emphasis is placed on specific tools and methods for extracting deleted or destroyed computer-related evidence. Prerequisite with a grade of “C” or higher: IST 110.