Digital Forensics – CSCI 511

CG • Section 8WK • 11/08/2019 to 04/16/2020 • Modified 02/02/2022

Course Description

This course covers the basics of digital forensics, including the technical aspects of evidence gathering for legal testimony and usage of digital forensics tools.

For information regarding prerequisites for this course, please refer to the Academic Course Catalog.

Rationale

Computing systems are increasingly involved in criminal activity, motivating the need for forensics specialists who understand the tools and techniques required to acquire, examine, and interpret digital evidence. Students interested in cyber security must understand the technical and legal implications of today’s digital world in order to competently promote justice when computer systems are misused. This course will introduce students to this field of computer forensics and provide a comprehensive foundation for investigating and responding to cyber crime.

Measurable Learning Outcomes

Upon successful completion of this course, the student will be able to:

  1. Use forensic technology and tools in order to collect, recover, preserve, and prepare digital evidence in a forensically sound manner from a variety of digital systems.
  2. Evaluate typical forms of computer crime or attack to determine evidentiary value.
  3. Explain the legal issues and rules of evidence that apply in performing digital forensic analyses.
  4. Prepare a forensics report in an administrative, civil, or criminal context to defend investigative findings in the role of an expert witness.
  5. Integrate biblical principles within the field of digital forensics.

Course Assignment

Textbook readings and lecture presentations

Course Requirements Checklist

After reading the Course Syllabus and Student Expectations, the student will complete the related checklist found in Module 1: Week 1.

Discussions (3)

Discussions are collaborative learning experiences. Therefore, the student is required to provide a thread in response to the provided prompt for each forum. Each thread must be at least 350 words and demonstrate course-related knowledge. In addition to the thread, the student is required to reply to 2 other classmates’ threads. Each reply must be at least 250 words. All assertions in the student’s thread and replies must be supported by course materials, good examples, thoughtful analysis, and at least 1 scholarly resource in the thread, in addition to at least 1 scholarly resource in one of the replies. All sources must be cited in current APA format.

Lab Assignments (10)

The student will complete labs associated with the course material. Each lab will have specific instructions for tasks, along with deliverables, to be completed in the virtual lab environment.

Quizzes (6)

Each quiz will cover the course material for the module in which it is assigned. Each quiz will be open-book/open-notes, contain 8 multiple-choice and true/false questions and 2 short answer questions, and have a 40-minute time limit.

Quiz: Midterm

The midterm quiz will cover the course material for modules 1–4. The midterm quiz will be open-book/open-notes, contain 46 multiple-choice and true/false questions and 4 short answer questions, and have a 2-hour time limit.

Quiz: Final

The final quiz will cover all of the course material for modules 5–8. The final quiz will be open-book/open-notes, contain 46 multiple-choice and true/false questions and 4 short answer questions, and have a 2-hour time limit.