CISF110 Computer Forensics I
Department of Science, Technology, Engineering & Mathematics: Computer/Information Science
- I. Course Number and Title
- CISF110 Computer Forensics I
- II. Number of Credits
- 3 credits
- III. Number of Instructional Minutes
- IV. Prerequisites
- CISC105 or CISC128
- CISC128 with permission of the Department of Science, Technology, Engineering and Mathematics
- V. Other Pertinent Information
- VI. Catalog Course Description
- This course is an introduction to the science of computer forensics. Topics include how data is stored, where it is located, and how to recover data, using commercial and open source software utilities to conduct computer investigations. Students gain hands-on experience in the laboratory.
- VII. Required Course Content and Direction
Course Learning Goals
- explain the computer forensics profession;
- diagram the structure of files on a hard disk;
- describe the features and operation of modern file systems;
- perform elementary forensic analysis and data recovery on the FAT (File Allocation Table) systems, using only a hex editor; and
- evaluate the strengths and weaknesses of various software tools for data recovery.
Planned Sequence of Topics and/or Learning Activities
- Computer Forensics Profession
- Job Outlook
- Investigative Techniques
- Computer Forensics Tools
- Command Line
- Operating Systems
- Working with Windows and DOS Systems
- Macintosh and Linux Boot Processes and File System
Assessment Methods for Course Learning GoalsFormal assessment will consist of open-ended questions reflecting theoretical and applied situations, as well as laboratory exercises.
Reference, Resource, or Learning Materials to be used by Student:Departmentally-selected textbook and/or readings. Details provided by instructor of each course section. See course syllabus.
Review/Approval Date - 5/07; Pre-req/co-req revised 02/2011; Dept name change 8/21/2012; New Core 8/2015