CFS 160

Computer Forensics Fundamentals

4 Undergraduate credits
Effective August 19, 2017 – Present

Graduation requirements this course fulfills

Computer forensics involves the activities in collecting, processing, preserving, analyzing and presenting computer-related evidence in court for criminal prosecutions or civil litigations. In this course, students will be exposed to those computer forensic activities through lectures, case studies, hands-on labs, and individual and group projects. Students will study the fundamental concepts and learn essential artifacts of computer operation, internet control, digital evidence collection, and computer crime investigation, and be able to recognize as well as understand how a computer related crime or incident is prosecuted or litigated in order to have a comprehensive view of the field of Computer Forensics. This course is designed for the first year of the students majoring in Computer Forensics or the students who are interested in knowing what Computer Forensics is about.

Special information

Note: Students must be proficient in using a computer. Required skills include the ability to create directories (folders) and files of different types (plain text files, zip files, etc.) using a graphical user interface as well as a command line interface. Students are responsible to both be aware of and abide by prerequisites for ICS courses for which they enroll, and will be administratively dropped from a course if they have not met prerequisites.

Learning outcomes

General

  • Be able to identify the process of the collection of computer-related evidence
  • Be able to list the steps in investigation of a computer-related incident
  • Be able to explain the procedure in presenting computer-related evidence in court
  • Be able to describe the concepts of computer forensics, digital forensics, and cyberspace forensics
  • Be able to describe the fundamentals in the legal proceedings for handling criminal and civil cases
  • Be able to list the responsibilities as a digital forensic examiner
  • Be able to describe the phases of computer forensics related investigations
  • Be able to explain the basic knowledge in computer hardware and software
  • Be able to list essential computer forensic techniques
  • Be able to recognize the forensic artifacts of a computer-related evidence
  • Be able to follow the primary steps in protecting computer-related evidence
  • Be able to describe a criminal case or a civil incident
  • Be able to identify the tools used for a criminal or a civil investigation.