Oct 17, 2019
CIS 236 - Computer Forensics II 5 Credits
Builds on CIS 235. Students perform forensic analysis and produce forensic reports on a series of compromised and/or seized system images, using tools for distributed host data collection, imaging and forensics. Students will examine host-level data along with some network-level data and systematically determine what happened and how. They will then present their findings.
Pre-requisite(s) CIS 235 min 2.0 and concurrent enrollment in LEGAL 220
Designed to Serve Students enrolled in the Data Recovery/Forensics Specialist program. Industry professionals want to advance skills in producing forensics reports on compromised system images using forensics tools.
Active Date 2012-05-02
Grading System Decimal Grade
Class Limit 24
Contact Hours: Lecture 55 Lab 0 Worksite 0 Clinical 0 Other 0
Total Contact Hours 55
I. Overview of Forensic Analysis
C. Evidence Handling
II. Software and Hardware Tools
A. Disk Imaging and use of imaged drives
B. Compromised and non-compromised systems
C. Forensic Software
III. Evidence Analysis
A. Acquisition of Evidence
C. Chain of custody
D. Data Verification
A. Legal Procedures
B. Expert Witness Preparation
C. Mock Trials
Student Learning Outcomes
Discuss the issues of digital forensic analysis.
Use standard forensics tools and produce forensic reports on drive images
Retrieve e-discovery evidence from digital devices and systems.
Understand the different approaches to forensic discovery as it relates to court proceedings
Demonstrate the ability to recover electronic evidence in a manner that ensures it is forensically sound for use in a court of law.
Analyze forensic evidence, and document procedures in a manner that allow legal personnel to comprehend and use your findings in a court of law
Be able to compose a well written forensic report, one that is suitable for discovery challenges by legal personnel.
Document processes and procedures used in the various steps of the forensic investigation and evidence examinations.
Understand and demonstrate effective forensic report writing
[Add to Portfolio]