CIT 180 - Computer Forensics 1

 
Description
This course introduces students to the fundamentals of the computer forensics field and technology. Students obtain essential knowledge of the computer forensics profession, legal issues and procedures of computer investigations, digital evidence management, industry-standard computer forensic tools, file systems, data recovery, data collection and sample case evaluations.

1. Define basic terminology involved with computer forensics and digital evidence.
2. Describe the role of computer forensics and relevant laws in a criminal investigation.
3. Summarize procedures for public and private investigations of computer crimes or incidents.
4. Prepare a computer forensic investigation plan that secures digital evidence.
5. Explain relevant legal ground or corporate policies for pursuing digital evidence.
6. Identify legal or business needs for computer forensic hardware and software tools.
7. Use common industry-standard computer forensics tools.
8. Manage digital evidence using proper retention, storage and documentation techniques.
9. Describe the underlying concepts of data storage and operating system file systems.
10. Perform basic steps in data acquisitions of disk files using a software tool.

1. Computer forensics and related disciplines
2. Public enforcement investigations versus private business investigations
3. Definitions of a computer crime, incident and digital evidence
4. General steps in planning and conducting a computer investigation
5. Legal issues and procedures in collecting and securing digital evidence
6. Search and seizure and chain of custody regarding digital evidence
7. Windows file systems and Windows registries
8. Computer forensic hardware and software tools

• Technological Competence

Course and Section Search