CISF210 Computer Forensics II
Department of Science, Technology, Engineering & Mathematics: Computer/Information Science
- I. Course Number and Title
- CISF210 Computer Forensics II
- II. Number of Credits
- 3 credits
- III. Number of Instructional Minutes
- IV. Prerequisites
- CISF110 (C or better)
- V. Other Pertinent Information
- VI. Catalog Course Description
- This course is a continuation of Computer Forensics I. Topics include the fundamentals of digital computer acquisition, preservation, and analysis. Classroom concepts will be applied in a laboratory setting where students will employ basic rules of evidence, standard operating procedures for computer forensics.
- VII. Required Course Content and Direction
Course Learning Goals
- describe the features and differences between NTFS and FAT file systems;
- effectively utilize a commercial software tool to recover deleted files from a computer;
- evaluate the strengths and weaknesses of various software tools for data recovery; and
- develop a systematic approach to a computer investigation.
Planned Sequence of Topics and/or Learning Activities
- Investigative Techniques
- The Investigator's Office and Laboratory
- Processing Crime and Incident Scenes
- Digital Evidence Controls
- Computer Forensics Tools
- Command Line
- File Systems
- Boot Process
- Deleted Files and Slack Space
- Network Forensics and E-Mail Investigations
Assessment Methods for Course Learning GoalsFormal assessment will consist of open-ended questions reflecting theoretical and applied situations, as well as laboratory exercises.
Reference, Resource, or Learning Materials to be used by Student:Departmentally-selected textbook and/or readings. Details provided by instructor of each course section. See course syllabus.
Review/Approval Date - 5/07; New Core 8/2015