Computer Forensic Specialization

The course of SPECIALIZATION in FORENSIC COMPUTERS of the Faculty of Engineering of the FASTA University, developed by the Laboratory for Research and Development of Technology in Forensic Computer Science (InFo-Lab), has as its primary objective the training of computer professionals to act in extrajudicial and prejudicial interventions and in aid of Justice in the forensic field. It provides a response to a specific demand from society in general and justice in particular, at a national and international level, which requires IT professionals specialized in forensic issues in postgraduate university degrees. It aims for IT professionals to be successfully inserted in the Judicial field, improving their performance as assistants to the Justice, based on the improvement of technical aspects, and the recognition of the framework of action of forensic computer scientists in legal, criminalistics and judicial investigation. Likewise, it is proposed to contribute to the improvement of the administration of justice by training professionals specialized in the forensic task capable of recovering the valid digital evidence required to clarify a fact, analyze, use and develop the necessary tools for that purpose, as well as collaborate in the investigative process in general. In this sense, it should be noted that, in addition to the expert performance itself, the contribution of forensic IT professionals and ad hoc tools are a fundamental support to the investigative process of the Justice in the fight against crime. It is expected that, at the end of the specialization degree, the professional:

Obtain digital evidence resident in computers, application software, operating systems, file systems, and memory management structures.

Extract information from different technological platforms respecting the principles of good forensic practices.

Analyze the information in a computer system from a time sequence of events.

Describe the tasks, methods, and techniques used in a forensic activity.

Communicate the forensic activity carried out, in a language according to the target audience, respecting the terminology of the activity.

Retrieve digital evidence in network environments and mobile devices, using specific and appropriate techniques and tools.

Process and analyze multimedia files in order to obtain the specific information required.

Recognize the framework of action of forensic computer scientists in terms of legal, criminalistics and judicial investigation.

Identify the set of techniques and tools for computer security and cryptography to be used according to the case in which it will act.

Differentiate cyber defense and incident response activities from computer forensics and IT expertise.