Prepares the student for a role on an organizational IT support staff where the need for resolving computer incidents is becoming increasingly common. Includes legal and ethical issues of search and seizure of computer and peripheral storage media leading to laboratory exercises examining computers configured with mix of both simulated criminal and other activities which are not criminal in nature, but do violate scenario-driven organizational policy. Requires the student to make choices/recommendations for further pursuit of forensics evidence gathering and analysis. Students will select and gather the utilities and procedures necessary for a court-acceptable forensics toolkit which will then be used to gather and examine specially configured desktop computers. Students will then participate in a mock court proceeding using the collected evidence. Credit will be given to either ITN 275 or ITN 276 and ITN 277, but not all three courses.