1.

TITLE OF COURSE:

Computer Forensics

PREFIX/NUMBER:

CNG 258

CREDIT HOURS:

4

2.

PREREQUISITE:

CNG124 or Instructors Permission

3.

RESOURCES NEEDED:

TEXT:

Guide to Computer Forensics and Investigations 2^nd Ed. Nelson, Phillips,Enfinger,Steuart

SUPPLIES:

4.

COURSE DESCRIPTION:

Exposes the student to the field of Computer Forensics and investigation.   Provides the student with methods to properly conduct a computer forensics investigation beginning with a discussion of ethics.  Topics covered include fundamental concepts, history of computer forensics, file structures, data recovery techniques, computer forensic tools and analysis.  The curriculum and objectives map to the International Association of Computer Investigative Specialists (IACIS) certification.

5.

COURSE OBJECTIVES:

By the end of the course, students will

1. Discuss proper chain of evidence procedure for computer investigation
2.       Explore a variety of disk structures and boot and startup tasks
3.       Identify, install and configure a variety of Computer Forensics software packages
4.       Explore computer forensics hardware
5.       Recover data
6.       Discuss the ethical and legal process required at a scenario based crime/incident scene
7.       Identify, install, and work with a variety of data acquisition tools
8.       Participate with a team in completing a Computer Forensics analysis
9.       Describe email servers, email crime, and email computer forensics tools
10.       Recognize and recover image files
11.       List procedural and evidence rules requirements for investigation reports
12.       Identify various types of testimony

6.

EVALUATION PROCEDURES:

The final grade for this course is determined by a combination of exams, quizzes, projects, and homework.  The point value of each assignment will be given to the students by the instructor is a separate handout.

Grading Scale
Raw Score Range

Letter Grade

90 to 100

A

80 to 89

B

70 to 79

C

60 to 69

D

0 to 59

F

Special Remarks:

1.

Attendance:  College policy states that students may be dropped from enrollment when absent 20% of the scheduled class meetings.  If enrolled from the beginning of the term, 15 hours will usually constitute 20% of a four-credit semester course which meets five hours per week.  Reinstatement procedures are described in the PCC catalog.

2.

Assignments/Missed Exams:  It is the student's responsibility, whether present or absent, to obtain all material presented and to complete all course assignments.  If prior arrangements are made or extenuating circumstances exist, makeup of tests may be allowed.  Late homework papers will not be accepted unless those same extenuating circumstances exist.  Makeup of quizzes is to be at the instructor's discretion.

7.

COURSE OUTLINE

Tentative Schedule

8.

METHODS OF INSTRUCTION:

To be successful in this course, students are expected to participate in discussions, readings, in-class writing, and peer review activities. The instructor may assign point values to such activities.

9.

ACADEMIC INTEGRITY:

The very nature of higher education requires that students adhere to accepted standards of academic integrity. Therefore, Pueblo Community College has adopted a policy of academic conduct as described in the Student Handbook. Violation of academic integrity may be defined to include the following: cheating, plagiarism, falsification and fabrication, abuse of academic materials, complicity in academic dishonesty, and personal misrepresentation. It is the student’s responsibility to be aware of the behaviors that constitute academic dishonesty. Sanctions for violating the standards of academic integrity may include warning, probation, suspension, and/or failure of the course or assignment at the discretion of the instructor.

10.

DISABILITY STATEMENT:   Students who have a documented disability may be eligible to receive accommodations for this class.  Please contact the Disability Resources Center at 549-3446 for further information.