Oct 26, 2020  
2017-2018 Catalog 
2017-2018 Catalog [ARCHIVED CATALOG]

Add to Portfolio (opens a new window)

CIS 155 - Introduction to Data Recovery/Forensics

5 Credits
Serves as a foundation class in data recovery and computer forensics. Students will learn the proper way to gather and secure evidence, document a computer crime scene, retrieve lost files, retrieve deleted files and e-mails and reconstruct data from various computer storage media. Students learn use of media imaging and data recovery tools. Stresses proper documentation and procedural guidelines. Students get hands-on experience with some of the popular commercial and open source digital forensics tools.

Pre-requisite(s) CIS 150 min 2.0
Fees CF

Designed to Serve Students enrolled in the Data Recovery/Forensics Specialist Degree. Industry professionals with hardware experience needing introductory computer forensics skills.
Active Date 2011-10-20

Grading System Decimal Grade
Class Limit 24
Contact Hours: Lecture 55 Lab 0 Worksite 0 Clinical 0 Other 0
Total Contact Hours 55
Degree Distributions:
Course Outline
I. Digital Forensics Capabilities History a. Types of devices digital forensics are used on b. Interesting digital forensics cases c. Data recovery operations; meaningful to business support II. Operating Systems a. Windows / Linux / Servers b. Basic functions as they relate to file structures c. Deleted files and hidden remnants d. O/S files and logs that support a forensic case III. Digital Forensic tools a. Write blockers (Hardware / Software) b. Commercial c. Open Source d. Password Crackers e. Installing and configuring forensic software IV. Data Acquisitions a. Case organization and documentation b. Chain of custody Handling evidence c. Data validation and authentication d. Types of forensic images e. Data acquisition methods and imaging V. Forensic Software a. Overview of forensic software features b. Processing the data c. Reviewing and searching evidence VI. Forensic Reports a. Reports created by forensic software b. Written reports c. The importance of case detail in reports VII. Ethics in the Forensic Field a. Understanding the importance of examiner credibility in the court system

Student Learning Outcomes
Discuss and identify different user needs and environments.

Use standard software forensics tools.

Use standard hardware devices such as write blockers, USB to SATA connectors, etc. to access hard drives and other storage devices

Use and evaluate new software forensic tools

Create an evidence/file recovery checklist.

Document investigation of forensic images

Troubleshoot PC problems and list the steps for a solution.

Research and document new procedures and evaluation of new devices as they come on the market

Understand and recognize applicable laws such as privacy, wire tap, etc. as they affect investigative procedures

Add to Portfolio (opens a new window)