CIS 155 - Introduction to Cyber Forensics

5 Credits

Serves as a foundation class in cyber forensics. Students will learn the proper way to gather and secure evidence, document a computer crime scene, retrieve lost files, retrieve deleted files and e-mails and reconstruct data from various digital storage media. Students learn use of media imaging and data recovery tools. Stresses proper documentation and procedural guidelines. Students get hands-on experience with some of the popular commercial and open source digital forensics tools.

Pre-requisite(s) CIS 150 min 2.0
FeesCF

Quarters Typically Offered
Fall Evening
Spring Evening

Designed to Serve Students enrolled in the Digital Forensics and Investigations AAS degree or certificate. Industry professionals with hardware experience needing introductory computer forensics skills.
Active Date 20220405T16:40:32

Grading Basis Decimal Grade
Class Limit 24
Contact Hours: Lecture 44 Lab 22
Total Contact Hours 66
Degree Distributions:
ProfTech Course Yes
Restricted Elective Yes
Course Outline

Digital Forensics Capabilities History
- Types of devices digital forensics are used on
- Interesting digital forensics cases
- Data recovery operations; meaningful to business support

Operating Systems
- Windows / Linux / Servers
- Basic functions as they relate to file structures
- Deleted files and hidden remnants
- O/S files and logs that support a forensic case

Digital Forensic tools
- Write blockers (Hardware / Software)
- Commercial
- Open Source
- Password Crackers
- Installing and configuring forensic software

Data Acquisitions
- Case organization and documentation
- Chain of custody Handling evidence
- Data validation and authentication
- Types of forensic images
- Data acquisition methods and imaging

Forensic Software
- Overview of forensic software features
- Processing the data
- Reviewing and searching evidence

Forensic Reports
- Reports created by forensic software
- Written reports
- The importance of case detail in reports

Ethics in the Forensic Field
- Understanding the importance of examiner credibility in the court system

Student Learning Outcomes
Explain the steps and outcomes of cyber forensics investigations using proper terminology.

Effectively use existing/new new software forensics tools, both open source and commercial, for lab projects.Effectively use existing/new new software forensics tools, both open source and commercial, for lab projects.

Correctly use standard hardware devices such as write blockers and adapter cables to access digital storage media for lab projects.

Analyze digital forensic images/evidence for an investigation using proper procedures and based on industry standards.

Apply applicable laws such as privacy and wire tap in relation to their impact on investigative procedures, based on industry standards.

Construct proper reports detailing the items found and analyzed during the investigation, based on industry standards.