CST 1300 Computer Forensics

Description

Computer Forensics is an introductory course in digital forensics, which is the study of a computer that has been compromised and the recovery of evidence or information. In this course the student will concentrate on how to recover information from a computer or network after an attack. The student will look at both disaster recovery after a hacker or virus attack and also how to get information from a system that has been used for illicit activities. The student will use a systematic approach to gather information without destroying evidence.

Credits

3

Prerequisite

CST 1125

Topics to be Covered

1. Computer Forensics components

2. The investigators tools and facilities

3. The investigation processes

4. Recovery of information

5. Recovery of the network

Learning Outcomes

1. List the components of computer forensics.

2. Identify computer investigation processes.

3. Create a plan for investigation of computers.

4. Describe the boot process of a computer.

5. Identify and locate computer forensic tools.

6. Describe the legal issues regarding data acquisition.

7. Recover a graphics and text images.

8. Prepare reports of the computer forensic investigation.

9. Backup information on a computer.

Credit Details

Lecture: 2

Lab: 1

OJT: 0