CIT-155 Intro to Computer Forensics

Bristol Community College - Spring 2018 Syllabus
Course Name : CIT-155
Course Description : Intro to Computer Forensics

Instructor : Igor
Office : K211
Telephone: 508-678-2811 ext. 3328

CIT-155 Intro to Computer Forensics

Catalog Description

This is an introductory course in computer and digital forensics. The course covers the principles, procedures, and techniques used in computer forensic crime investigations. Topics include understanding computer investigations, current computer forensics tools, processing crime and incident scenes, and digital evidence controls. Students are introduced to file systems, data acquisition, and computer forensics analysis. Three hours of lecture per week.

Student Learning Outcomes

At the completion of this course the student will be able to:

• familiarize with computer forensics as a profession
• understand computer crime investigations
• familiarize with current computer forensics tools
• respond to incidents and process a scene of a crime
• grasp the principals of Windows and Unix file systems
• develop basic experience with computer forensics analysis tools
• differentiate between tools for Unix, Mac, and Windows forensics
• gain a good foundation for additional computer forensics technology courses
  

Required Text

Steve Bunting, EnCase Computer Forensics -- The Official EnCE: EnCase Certified Examiner Study Guide, Sybex, 3rd edition, ISBN 9780470901069.

Course Format

This is a lecture course in which topics are presented by the instructor and are designed to promote classroom discussions.

Whenever possible, students will be given active learning exercises for both in and out of class.

The class syllabus, assigned readings, and the class exercises and project details will all be available from the class Web page.

Late assignments will have five points deducted from its grade for each day late. Projects more than 1 week late will NOT be accepted.

Class Participation

Be sure to do the required reading and assignments before attending class. You cannot successfully enter into discussion without some understanding of the material.Attendance and lateness: In case you are late or absent, it is your responsibility to get the course notes.

Projects and Assignments

Students are reminded of the College’s policies relative to working independently (see College Catalogue) and are required to complete all Lab Assignments and Projects individually. Certain projects in this course may be assigned to small work groups.

Quizzes and Examinations

Five online quizzes will be given throughout the semester, as well as the Final Paper assignment at the end of the course. Quiz dates and study material will be posted at least ten days prior to the due date.

Evaluation and Grading

To receive a passing grade, you must attend 80% of the classes, pass 80% of required work, andparticipate actively in the class.

Weights for Final Grade Determination

Written assignments will be graded using the following system:

Final Grades will be assigned as follows:

Success Tip

Here is a success tip From BCC Student Handbook, page 8: "For each hour in class, you should expect to study at least 2-3 hours outside of class. Know your limits, avoid over scheduling yourself (whether it be work or class). Set up a schedule that you know will allow you to earn good grades. And, maintain a day planner to help you stay organized."

Course Outline

I. Admissibility of Electronic Evidence

1. Forensic Evidence and Crime Investigation
2. Computer Forensics and Digital Detective Work

II.Preparing for E-Evidence Collection and Preservation

Tools, Environments, Equipment, and Certifications

Policies and Procedures

Data, PDA, and Cell Phone Forensics

Chapter Review Test

III.Forensic Examination of Computers and Digital and Electronic Media

Operating Systems and Data Transmission Basics for Digital

Midterm Examination

IV. Investigations

Investigating Windows, Linux, and Graphics Files

E-Mail and Webmail Forensics

Chapter Review Test

V. Detecting Intrusions, Malware, and Fraud

Internet and Network Forensics and Intrusion Detection

Tracking Down Those Who Intend to Do Harm on a Large Scale

Fraud and Forensic Accounting Investigation

Chapter Review Test

VI. Legal, Ethical, and Testimony Topics

Federal Rules and Criminal Codes

Ethical and Professional Responsibility in Testimony

Final Exam

Teaching Methodology

The lecture will be the principal teaching method used in this course. "Handouts" and sample programs will be available on the class web page. Youtube video notes are posted for the key concepts presented in this course. Class discussions will be conducted pertaining to the lab exercises. Software demos and overhead slides will be used.

It will be imperative that the student complete all assigned readings and homework assignments prior to class. Failure to do so is a formula for failure. Coming to class prepared is essential for successful completion of the course.

Attendance Policy

• Attendance is recorded weekly based on the student's ability to submit quality and timely lab/programming assignments each week. Students are considered "present" for the week if they submit the required lab assignment (with a satisfying passing grade) prior to the due date for that week. Poor attendance may affect your final grade.
• The instructor reserves the right to withdraw you from the class after three (3) absences. If you choose to withdraw from the class it is your responsibility to withdraw formally from the class prior to the final withdrawal date. Failure to do so will result in an "F" grade for the course.

BCC Academic Policies

College-wide Academic Policies outlined in BCC Academic Catalog directly apply to this course. It is your responsibility to read carefully and understand Academic Information, especially Academic Integrity, Academic Dishonesty, Academic Negligence, Plagiarism, and Classroom conduct, which are published online:

Disability Accommodations

I encourage any student in need of accommodations for a specific documented disability to meet with me and the Office of Disability Services (L109, 508-678-2811--Fall River, ext. 2955; Attleboro, ext. 2996; New Bedford, ext. 4011) at your earliest convenience to ensure timely and appropriate accommodations. You may also contact the Office of Disability Services online at

Note: This syllabus is a suggested course outline and will be generally followed, subject to change according to the instructor's discretion and needs. Academic flexibility is important.