Eastern Michigan University

School of Computer Forensics Investigations


The School of Computer Forensic Investigation at Eastern Michigan University is quickly gaining
a national reputation for excellence. Designed for the law enforcement community, this unique
educational/training program has been developed with cooperation from our instructors in law
enforcement, business and industry. These professionals provide comprehensive instruction
relevant to the recent developments in the field of computer forensics.

The classroom experience is supplemented with lecture and textbook materials. Considerable time is spent developing hands-on skills in an academic lab setting. Participants spend the majority of their class time doing analysis and implementing new techniques rather than talking about forensics. This hands-on training enhances the student’s ability to return to their departments and start processing cases without the need for additional training.

Type: Intermediate

Length: This course encompasses 6 weeks (240 Hours), and will run Monday through Friday 8am to 5pm.



Week One
Introduction to Digital Forensics
Building the Digital Forensics Computer
Operating System Instillation / Configuration

Week Two
Physical/Logical Disk Structure
DOS Basics/Advanced; Diskedit
FAT 12-16-32
Windows Operating System Artifacts

Week Three
Automated Tools for Forensic Analysis (AccessData FTK)

Week Four
Validation of Forensic Hardware/Software
External Media CD/DVD + Digital Film
Report Writing
Network Examinations

Week Five
Using Linux for Forensics Analysis
Internet History Analysis

Week Six
Legal Issues in Forensic Investigations
Password Decryption

Final Examination



The School of Computer Forensics Investigation has developed relationships with leading edge
industry professionals. These individuals hold positions as systems engineers, senior systems security professionals, cyber crime investigators, computer forensics examiners, network security administrators, teachers and trainers. Our faculty are content experts in their respective fields, and many hold advanced degrees.


Prerequisites for Attendance:

You must be an active law enforcement agent in the State of Michigan. If you are an agent from another state, please contact us for special entry requirements.

It is highly suggested that prior to attending this program you have previously completed the "School of Cyber Crime Investigations" or a similar training program.


Additional Information:

You will be invoiced once the application is received and accepted.

Please return applications to:
Center for Regional and National Security
Eastern Michigan University
8 Roosevelt Hall
Ypsilanti, MI 48197



Contact Information:


Lisa L. Barley
Lecturer III

466 Owen Bldg
(734) 487-3240
Ypsilanti, MI 48197



Enrollment Fee:

Partial funding has been provided by a grant through the Michigan Justice Training Commission. Unfortunately, the grant was not funded in its entirety and the cost will be $1,600.00 per student to attend.

Included Training Materials:

All class participants will receive all training materials including books, manuals, parking passes, electronic storage devices (thumb-drives), and computer repair toolkits.

Additionally, every student will receive a copy of the following software and hardware devices that will be utilized during both the classroom instruction and once the student returns to their home department for use during investigations:

  • Hardware Write Block Device
  • E-Defense Helix™
  • Vmware Workstation
  • NetAnalysis

NOTE: The enrollment fee does not include a Forensic Workstation OR the Digital Forensics Software that will be utilized during a full Digital Forensics examination. Please see the "Digital Forensic Workstation" for additional details.


Digital Forensics Workstation:

During Week One of the program students will build their own Forensic Computer. This accomplishes two goals:

  1. The students learn about hardware issues and the need to have a sound basis of the internal workings of the computer.
  2. The student will leave with a computer that they built as part of their studies.

This is a state of the art machine that students will take back to their respective agency and use to perform digital forensics investigations on. While it is not required that each student purchase this machine, it affords those departments an opportunity to not only have an individual trained, but will also allow them to have the necessary hardware and software tools available upon completion of the program to start conducting forensic analysis at their respective agencies.

The estimated cost for this device is under $6,900 which will include:

  • Digital Forensic Workstation
  • AccessData's Ultimate Tool Kit (FTK)™ software
  • Forensic Evidence Write-Blockers

Please call 734-487-1590 for further information.

This is a considerable savings over commercially produced Forensic Devices with price tags of well over $11,000.



Training Dates:

Week One
September 14 - 18, 2009
Week Four
October 19 - 23, 2009
Week Two
September 28 - October 2, 2009
Week Five
November 9 - 13, 2009
Week Three
October 5 - 9, 2009
Week Six
November 16 - 20, 2009






CeRNS Home | Schedule | Downloads | Applications | Contact Us

Center for Regional and National Security at Eastern Michigan University
16 Sill Hall, Ypsilanti, MI. 48197
Phone: 734.487.1590 Fax: 734.487.1620