CIT 280 - Computer Forensics 2

 
Description
This course provides students opportunities to apply the fundamentals of computer forensics to the processing and analysis of real or hypothetical cases. Students obtain hands-on experience in problem solving and using computer forensic knowledge and tools to identify, recover, collect, process, analyze, document and present digital evidence involving sample cases of computer crimes or incidents. The hands-on experience includes work on file and data recovery in addition to examination and analysis of email and network intrusions.

1. Identify legal and business implications of sample cases of computer investigations.
2. Create a public or private investigation plan of a sample case.
3. Choose an appropriate data acquisition method.
4. Preserve data integrity using appropriate forensic tools.
5. Assess operating system file systems using forensic analysis tools.
6. Investigate problems of data hiding and data access.
7. Interpret network data capture and analysis.
8. Analyze email messages and headers.
9. Summarize findings of digital evidence per business and legal procedures.

1. Major laws and regulations regarding information security
2. Public investigation versus private or corporate investigation
3. Sample cases of public and private investigation
4. Features of various computer forensic tools and data recovery procedures
5. Network sniffing and monitoring tools
6. Intrusion Detection Systems (IDS) software tools for Windows
7. Email configurations and data analysis
8. Legal documentation of digital evidence
9. Expert witnesses for computer investigations

• Critical Thinking & Problem Solving
• Technological Competence

Course and Section Search