This course is structured to familiarize the student with current methods and techniques in computer forensics with a focus on the appropriate procedures for evidence collection and processing. As electronic information increases in its importance and use in the court of law, future investigators need to be able to assess and apply the methods and processes available to them. These methods and processes will help investigators to collect, process, analyze, and use information evidence supporting investigations and judicial proceedings. The course is supplemented by hands-on-exercises, case studies, and a moot court exercise in which each student will testify. Prerequisites: Recommended ICT 4605, ICT 4610.