The aim of this course is to obtain information about the selection, planning, correct structuring of the information systems and necessary security measures to identify and prevent attacks. It is aimed to collect the evidence related to cyber crimes, to take the forensic copies, to analyze and to report them, and to evaluate the cases encountered in legal terms.

Introduction to cybercrime, forensic information technologies, data recovery from disk and file systems, evidence collection, ownership verification, data validation, storage and protection, recognition and identification, operating system architectures, analysis of file structures, network analysis, system analysis, forensic information methodology, current developments in forensics.