Malware Investigations

Malware is any software developed by cybercriminals to encrypt, alter or steal data, such as passwords or credit card numbers, to spy on someone's computer activity without their knowledge or permission, or to hijack, damage or destroy computers (including mobile phones, tablets, etc.) and computer systems. This course discusses the techniques, after a malware attack, for determining what happened, when it happened, and how it happened. Once that is clear, it may be possible to prove that a crime did (or did not occur) and even to identify the cybercriminal by following a structured investigative process that includes properly collecting, preserving, managing, analyzing and presenting evidence.