COMPUTER FORENSICS

CFOR-101 Computer Forensics I

3 Semester Hours

This course focuses on the emerging role of the computer forensics examiner, forensic evidence preservation and introduces students to computer forensic tools. This course provides a comparative study of information technology, evidence analysis, chain of custody, and data retrieval from computer hardware and software applications. Students will have hands-on laboratory experience using various computer forensic tools, evidence preservation techniques and documentation. (2 hours lecture, 2 hours lab)

CFOR-200 Computer Forensics II

3 Semester Hours

This course is designed to cover advanced concepts in computer forensic analysis, and the development of investigative thinking and awareness. This course covers basic criminal law concepts, related national electronic laws, and sources of electronic information as it applies to computer forensics. Study of data hiding techniques, encryption and password recovery will also be covered. Students will have hands-on laboratory experience using various computer forensic tools, evidence gathering and documentation techniques. Prerequisite: CFOR-101. (2 hours lecture, 2 hours lab)

CFOR-210 Computer Forensics III

3 Semester Hours

This course covers topics related to advanced concepts in computer forensics and cross validating electronic case data analysis using popular software tools recognized in the computer forensics field. Students will examine electronic communications laws related to PDA’s, cell phones and laptop devices. Students will examine how PDA’s, cell phones and laptop devices operate, store electronic data, and will become familiar with the major manufacturers of these electronic storage devices. Students will develop basic computer forensic interview techniques and skills. Students will have hands-on laboratory experience using various computer forensic tools and prepare evidence. Prerequisite: CFOR-200. (2 hours lecture, 2 hours lab)

CFOR-250 Computer Network Forensic Technology

3 Semester Hours

This course will cover computer forensics examination process in a network environment. The OSI model, TCP/IP model and IP addressing will be discussed and the relationship and how these layered approaches relate to the computer forensics examination process. Students will determine how various network devices such as servers, hubs, switches and routers create log files that can be used for forensic examination. Students will examine various log files, port scans, and packet sniffers, etc., from network devices for computer forensic analysis. Students will have hands-on experience with actual computer networks in the lab using various forensics tools and devices. Prerequisite: CFOR-210. (2 hours lecture, 2 hours lab)