Digital Forensics – CSCI 511

CG • Section 8WK • 11/08/2019 to 04/16/2020 • Modified 07/28/2020

Course Description

This course covers the basics of digital forensics, including the technical aspects of evidence gathering for legal testimony and usage of digital forensics tools.

Prerequisite

Admission into program.

Rationale

Computing systems are increasingly involved in criminal activity, motivating the need for forensics specialists who understand the tools and techniques required to acquire, examine, and interpret digital evidence. Students interested in cyber security must understand the technical and legal implications of today’s digital world in order to competently promote justice when computer systems are misused. This course will introduce students to this field of computer forensics and provide a comprehensive foundation for investigating and responding to cyber crime.

Measurable Learning Outcomes

Upon successful completion of this course, the student will be able to:

  1. Use forensic technology and tools in order to collect, recover, preserve, and prepare digital evidence in a forensically sound manner from a variety of digital systems.
  2. Evaluate typical forms of computer crime or attack to determine evidentiary value.
  3. Explain the legal issues and rules of evidence that apply in performing digital forensic analyses.
  4. Prepare a forensics report in an administrative, civil, or criminal context to defend investigative findings in the role of an expert witness.
  5. Integrate biblical principles within the field of digital forensics.

Course Assignment

Textbook readings and lecture presentations

Course Requirements Checklist

After reading the Course Syllabus and Student Expectations, the student will complete the related checklist found in Module/Week 1.

Discussion Board Forums (3)

Discussion boards are collaborative learning experiences. Therefore, the student is required to provide a thread in response to the provided prompt for each forum. Each thread must be at least 350 words and demonstrate course-related knowledge. In addition to the thread, the student is required to reply to 2 other classmates’ threads. Each reply must be at least 250 words. All assertions in the student’s thread and replies must be supported by Reading & Study materials, good examples, thoughtful analysis, and at least 1 scholarly resource.

Labs (8)

The student will complete labs associated with the course material. Each lab will have specific instructions for tasks, along with deliverables, to be completed in the virtual lab environment.

Quizzes (6)

Each quiz will cover the Reading & Study material for the module/week in which it is assigned. Each quiz will be open-book/open-notes, contain 8 multiple-choice and/or true/false questions and 2 short answer questions, and have a 20-minute time limit.

Midterm Exam

The Midterm Exam will cover the Reading & Study material for Modules/Weeks 1–4. The Midterm Exam will be open-book/open-notes, contain 48 multiple-choice and/or true/false questions and 2 short answer questions, and have a 1-hour and 30-minute time limit.

Final Exam

The Final Exam will cover all of the Reading & Study material for the entire course. The Final Exam will be open-book/open-notes, contain 48 multiple-choice and/or true/false questions and 2 short answer questions, and have a 1-hour and 30-minute time limit.