CIS 155 - Introduction to Cyber Forensics

5 Credits

Serves as a foundation class in cyber forensics. Students will learn the proper way to gather and secure evidence, document a computer crime scene, retrieve lost files, retrieve deleted files and e-mails and reconstruct data from various digital storage media. Students learn use of media imaging and data recovery tools. Stresses proper documentation and procedural guidelines. Students get hands-on experience with some of the popular commercial and open source digital forensics tools.

Pre-requisite(s) CIS 150 min 2.0
FeesCF

Quarters Typically Offered
Fall Evening
Spring Evening

Designed to Serve Students enrolled in the Digital Forensics and Investigations AAS degree or certificate. Industry professionals with hardware experience needing introductory computer forensics skills.
Active Date 20200330T21:14:44

Grading System Decimal Grade
Continuous Enrollment Yes
Class Limit 24
Contact Hours: Lecture 44 Lab 22
Total Contact Hours 66
Degree Distributions:
ProfTech Course Yes
Restricted Elective Yes
Course Outline

Digital Forensics Capabilities History
- Types of devices digital forensics are used on
- Interesting digital forensics cases
- Data recovery operations; meaningful to business support
Operating Systems
- Windows / Linux / Servers
- Basic functions as they relate to file structures
- Deleted files and hidden remnants
- O/S files and logs that support a forensic case
Digital Forensic tools
- Write blockers (Hardware / Software)
- Commercial
- Open Source
- Password Crackers
- Installing and configuring forensic software
Data Acquisitions
- Case organization and documentation
- Chain of custody Handling evidence
- Data validation and authentication
- Types of forensic images
- Data acquisition methods and imaging
Forensic Software
- Overview of forensic software features
- Processing the data
- Reviewing and searching evidence
Forensic Reports
- Reports created by forensic software
- Written reports
- The importance of case detail in reports
Ethics in the Forensic Field
- Understanding the importance of examiner credibility in the court system

Student Learning Outcomes
Explain what cyber forensics investigations entail and describe using proper terminology of what can be accomplished performing such investigations.

Use and evaluate existing / new software forensics tools both open source and commercial.

Use and evaluate standard hardware devices such as write blockers, adapter cables etc. to access desktops, laptops, mobile devices and other digital storage media.

Understand and follow proper procedures when analyzing digital forensic images/evidence related to an investigation.

Understand and apply applicable laws such as privacy, wire tap, etc. in relation to their impact on investigative procedures.

Write proper reports detailing the items found and analyzed during the investigation.