CISF110 Computer Forensics I

Department of Science, Technology, Engineering & Mathematics: Computer/Information Science

I. Course Number and Title
CISF110 Computer Forensics I
II. Number of Credits
3 credits
III. Minimum Number of Instructional Minutes Per Semester
IV. Prerequisites
CISC105 or CISC128
CISC128 with permission of the Department of Science, Technology, Engineering and Mathematics.
V. Other Pertinent Information
VI. Catalog Course Description
This course is an introduction to the science of computer forensics. Topics include how data is stored, where it is located and how to recover data using commercial and open source software utilities to conduct computer investigations. Students will gain hands-on experience in the laboratory.
VII. Required Course Content and Direction
  1. Learning Goals:

    Course Specific - The student will be able to:

    1. explain the computer forensics profession;
    2. diagram the structure of files on a hard disk;
    3. describe the features and operation of modern file systems;
    4. perform elementary forensic analysis and data recovery on the FAT (File Allocation Table) systems using only a hex editor; and
    5. evaluate the strengths and weaknesses of various software tools for data recovery.
  2. Planned Sequence of Topics and/or Learning Activities:

    1. Computer Forensics profession
      1. job outlook
      2. certification
    2. Investigative techniques
    3. Computer forensics tools
      1. hardware
      2. software
        1. command line
        2. GUI
    4. Operating systems
      1. working with Windows and DOS systems
      2. Macintosh and Linux Boot processes and file system
  3. Assessment Methods for Core Learning Goals:

    This course is not in the Core.

    All Discipline-Specific Course Objectives will be assessed as follows:

    The student will apply computer forensic concepts and principles to solve problems presented through informal assessment, such as oral communication among students and between teacher and students. Formal assessment will consist of open-ended questions reflecting theoretical and applied situations, as well as laboratory exercises.

  4. Reference, Resource, or Learning Materials to be used by Students:

    Departmentally selected textbook and/or readings. Details provided by instructor of each course section. See course format.
VIII. Teaching Methods Employed
Section VIII is not being used in new and revised syllabi as of 12/10/08.

Review/Approval Date - 5/07; Pre-req/co-req revised 02/2011; Dept name change 8/21/2012