

NSF Computer Forensics Project
Supported by NSF
San Jose State University
NSF SaTC Award #2304753
Visit our SJSU DF Lab: https://www.svdflab.com
Computer forensic (CF) investigators require a unique education balancing forensics, computer science, and criminal justice. This includes not only a theoretical foundation, but also practical experience processing digital evidence. To meet these needs, education will incorporate training on the technologies and current best practices used within the discipline through hands-on experiences with the latest trends in sources (devices) of digital evidence. Existing learning environments will be modified in three different ways and evaluated to measure the impacts on student success and workplace preparedness, especially among underrepresented groups. First, by identifying how students’ navigational path (e.g., order of courses, pre-existing knowledge) within the interdisciplinary coursework impacts the successful completion of the program, and how modifications to these pathways can increase student success. Second, by introducing active-learning pedagogy into the classroom and training on hardware and software currently used by CF practitioners. Third, by developing a laboratory infrastructure for students to complete internships where they can conduct digital evidence investigations on active criminal cases. This project is supported by the Secure and Trustworthy Cyberspace (SaTC) program, which funds proposals that address cybersecurity and privacy, and in this case specifically cybersecurity education. The SaTC program aligns with the Federal Cybersecurity Research and Development Strategic Plan and the National Privacy Research Strategy to protect and preserve the growing social and economic benefits of cyber systems while ensuring security and privacy.
(Digital) Forensics Training Program
Program Overview
This 5-week online workshop provides structured, hands-on training in digital forensics. Participants will learn foundational principles, investigative methodologies, evidence handling procedures, and core forensic tools used in real-world cybercrime investigations.
The course is designed for IT professionals, cybersecurity students, law enforcement personnel, and anyone interested in forensic investigation of digital systems.
Duration: April 20 – May 22, 2026 (5 weeks)
Schedule: Mondays & Thursdays
Time: 7:00 – 8:30 p.m.
Format: Online (Live Instructor-Led)
Learning Objectives
By the end of the workshop, participants will be able to:
-
Understand digital forensic principles and legal considerations
-
Perform forensic acquisition of digital evidence
-
Analyze file systems and recover deleted data
-
Conduct basic network and memory forensics
-
Prepare structured forensic reports
-
Maintain chain of custody and evidence integrity
Training History in 2023 - 2025
Between Fall 2023 and Spring 2025, the Silicon Valley Digital Forensics Laboratory (SVDFL) engaged multiple cohorts of undergraduate and internship students enrolled in the Digital Evidence concentration. Cohorts varied in size by semester but consistently represented a diverse cross-section of academic backgrounds and professional interests. Students often pursued dual focuses in forensic science, cybersecurity, and computer science, enhancing interdisciplinary collaboration.
From 2023 to 2025, the lab received a total of 22 internship applications, with 6 students formally selected to participate across three cohorts after successful background screening with University Police Department (UPD) as of Summer 2025. During Summer 2024, two students participated in the laboratory; by Fall 2024, 12 internship applications were received, and three students were selected after background checks with law enforcement. In Fall 2025, six of the eight active students have digital forensics backgrounds, while two specialize in computer engineering. This diverse composition has been integral to the lab’s mission of broadening participation in forensic science education while cultivating technical and analytical skills essential to the national cybersecurity workforce pipeline.