CISF210 Computer Forensics II
Department of Science, Technology, Engineering & Mathematics: STEM Department Archive
- I. Course Number and Title
- CISF210 Computer Forensics II Course No Longer Offered
- II. Number of Credits
- 3 credits
- III. Number of Instructional Minutes
- 2250
- IV. Prerequisites
- CISF110 (C or better)
- Corequisites
- None
- V. Other Pertinent Information
- None
- VI. Catalog Course Description
- This course is a continuation of Computer Forensics I. Topics include the fundamentals of digital computer acquisition, preservation, and analysis. Classroom concepts will be applied in a laboratory setting where students will employ basic rules of evidence, standard operating procedures for computer forensics.
- VII. Required Course Content and Direction
-
-
Course Learning Goals
Students will:
- describe the features and differences between NTFS and FAT file systems;
- effectively utilize a commercial software tool to recover deleted files from a computer;
- evaluate the strengths and weaknesses of various software tools for data recovery; and
- develop a systematic approach to a computer investigation.
-
Planned Sequence of Topics and/or Learning Activities
Course Outline:
- Investigative Techniques
- The Investigator's Office and Laboratory
- Processing Crime and Incident Scenes
- Digital Evidence Controls
- Computer Forensics Tools
- Hardware
- Software
- Command Line
- GUI
- Platforms
- File Systems
- Boot Process
- Deleted Files and Slack Space
- Network Forensics and E-Mail Investigations
-
Assessment Methods for Course Learning Goals
Formal assessment will consist of open-ended questions reflecting theoretical and applied situations, as well as laboratory exercises. -
Reference, Resource, or Learning Materials to be used by Student:
Departmentally-selected textbook and/or readings. Details provided by instructor of each course section. See course syllabus.
-
Review/Approval Date - 5/07; New Core 8/2015