COMN-271 Computer Forensics

Credits 3 / 3 Contact Hours
Prerequisite: Placement into RDNG-016 (ACSR-016) Pre-requisite: COMC-125 Pre- or Co-requisite: COMN-181
This advanced course deals with the preservation identification extraction documentation and interpretation of computer data. Topics covered include evidence handling chain of custody collection preservation identification and recovery of computer data using forensic recovery software and methods. Students learn the theory of computer forensics as well as complete hands-on activities to produce a legitimate computer forensics case analysis.

Course Outcomes
1. Explain the difference between computer forensics and other related disciplines 2. Examine a computer crime and policy violation 3. Conduct a computer investigation 4. Explain computer forensic lab certification requirements 5. Develop a plan for a computer forensic lab 6. Explain the different computer forensic software and hardware ends 7. Determine how a search can be conducted 8. Describe how to review a case 9. Explain how to identify digital evidence 10. Determine how to secure digital evidence at an incident scene 11. Explain how to store digital evidence 12. Explain the boot tasks among different versions of Microsoft operating systems 13. Explain the boot tasks within a Macintosh, Unix, and Linus systems 14. Develop a data recovery plan 15. Describe how to acquire data from various hardware devices 16. Describe how to conduct a computer forensic analysis 17. Identify the differences between image file types 18. Locate and recover image files 19. Outline copyright issues with graphics 20. Outline approach to network forensics 21. Use network forensic tools 22. Investigate e-mail crimes and investigations 23. Outline the guidelines for writing various reports