This course provides knowledge, theory, and practical skills for operating system forensics investigations. The course focuses on hard disk data acquisition, volume analysis, file system data structure analysis, registry analysis, registry analysis, memory analysis, malware detection, and timeline analysis. This is a Digital Forensics specialization course. Prerequisite: None. (F,S,SS)