Mar 23, 2018
CSEC 1530 - Computer Forensics
This course is designed to train “digital investigators” to properly conduct a computer forensics examination and give them an understanding of the process of electronic discovery. Students learn the skills and techniques necessary to conduct a thorough examination. The course develops the foundation needed as the first step in the journey to achieve a Computer Forensics certification such as GIAC Certified Forensic Analyst (GCFA), ISFCE Certified Computer Examiner CCE or IACRB Certified Computer Forensics Examiner (CCFE).
Successful completion of CSEC 1500 Computer Network Security + and MSFT 1745 A+ Computer Maintenance, or instructor consent.
Minimum Student Competencies
Upon completion of CSEC 1530 Computer Forensics, the student will:
- discuss legal and ethical issues surrounding computer forensics.
- demonstrate an understanding of digital forensics fundamentals.
- assess evidence acquisition opportunities in common computer technology to include but not limited to: browsers, networks, computer systems, operating systems, email, and mobile devices.
- apply a forensically sound approach to evidence acquisition, preparation and preservation to various types of computer systems, file types, logs, communication, social media and common digital media employed throughout.
- determine data-hiding techniques.
- identify commonly used forensic software utilities and their purpose.
- identify commonly used forensic hardware tools and their purpose.
- detail the design of a digital forensics laboratory.
- discover the process of casework and report development.
Instructional Method Lecture
Contact Hours: 3 hours/week
[Add to Portfolio]