CIT 180 - Computer Forensics 1

 
Description
This course introduces students to the fundamentals of the computer forensics field and technology. Students will obtain essential knowledge of the computer forensics profession, legal issues and procedures of computer investigations and digital evidence management, industry-standard computer forensic tools, file systems, data recovery and collection, and sample case evaluations. Each student is required to sign an ethical agreement with the instructor.

1. Define basic terminology in computer forensics and digital evidence.
2. Describe the role of computer forensics and relevant laws in a criminal investigation.
3. Explain procedures for public and private investigations of computer crimes or incidents.
4. Identify and prepare a computer forensic investigation and secure digital evidence.
5. Cite and explain relevant legal ground or corporate policies for pursuing digital evidence.
6. Identify legal or business needs for computer forensic hardware and software tools.
7. Describe and use common industry-standard computer forensics tools.
8. Manage digital evidence with proper retention, storage, and documentation.
9. Describe the underlying concepts of data storage and Windows and DOS file systems.
10. Perform basic steps in data acquisitions of disk files using a software tool.

1. Introduction to computer forensics, technology, and related disciplines
2. Public enforcement investigations versus private business investigations
3. Definitions of a computer crime, incident, and digital evidence
4. General steps in planning and conducting a computer investigation
5. Legal issues and procedures in collecting and securing digital evidence
6. Search and seizure and chain of custody regarding digital evidence
7. Windows and DOS file systems and Windows registries
8. Computer forensic hardware and software tools

Course and Section Search