CIS 186 Computer Forensics

Lecture Hours: 4
Credits: 4

This course teaches the basics of computer forensics as it applies to personal computers and workstations, including how to obtain and analyze digital information for use as evidence in civil, criminal, or administrative cases.

Prerequisite: CIS 102A, CIS 120, CIS 140B, and CIS 179; or consent of instructor. (All prerequisite courses must be completed with a grade of C or better.)
Student Learning Outcomes:

Analyze digital evidence using a systematic approach
Maintain chain of custody for seized evidence
Retrieve deleted files
Retrieve hidden files
Create an image file and a hash
Write technical reports

Content Outline

Understanding Computer Investigations
The Investigator’s Office And Laboratory
Seize Evidence And Maintain Chain Of Custody
Computer Forensics Tools
Processing Crime And Incident Scenes
Digital Evidence Controls
Recover Deleted And Hidden Files
Investigate E-Mail Crimes
Working With Windows And DOS Systems
Computer Forensics Analysis