CISF110 Computer Forensics I
Department of Science, Technology, Engineering & Mathematics: STEM Department Archive
- I. Course Number and Title
- CISF110 Computer Forensics I Course No Longer Offered
- II. Number of Credits
- 3 credits
- III. Number of Instructional Minutes
- 2250
- IV. Prerequisites
- CISC105 or CISC128
- Corequisites
- CISC128 with permission of the Department of Science, Technology, Engineering and Mathematics
- V. Other Pertinent Information
- None
- VI. Catalog Course Description
- This course is an introduction to the science of computer forensics. Topics include how data is stored, where it is located, and how to recover data, using commercial and open source software utilities to conduct computer investigations. Students gain hands-on experience in the laboratory.
- VII. Required Course Content and Direction
-
-
Course Learning Goals
Students will:
- explain the computer forensics profession;
- diagram the structure of files on a hard disk;
- describe the features and operation of modern file systems;
- perform elementary forensic analysis and data recovery on the FAT (File Allocation Table) systems, using only a hex editor; and
- evaluate the strengths and weaknesses of various software tools for data recovery.
-
Planned Sequence of Topics and/or Learning Activities
Course Outline:
- Computer Forensics Profession
- Job Outlook
- Certification
- Investigative Techniques
- Computer Forensics Tools
- Hardware
- Software
- Command Line
- GUI
- Operating Systems
- Working with Windows and DOS Systems
- Macintosh and Linux Boot Processes and File System
-
Assessment Methods for Course Learning Goals
Formal assessment will consist of open-ended questions reflecting theoretical and applied situations, as well as laboratory exercises. -
Reference, Resource, or Learning Materials to be used by Student:
Departmentally-selected textbook and/or readings. Details provided by instructor of each course section. See course syllabus.
-
Review/Approval Date - 5/07; Pre-req/co-req revised 02/2011; Dept name change 8/21/2012; New Core 8/2015