Basic practices and techniques used in computer forensics. This course introduces the chain of custody and determination of the sequence of events when a misuse or crime is suspected. Topics include: evidence collection and analysis, interpretation of clues from mail messages, news posting, and file signatures on hard drives and other computer storage media. Prerequisites: NSS 140.