Central Arizona College

CIS 157 Computer Forensics and Investigation

Credit Hours: 3
Effective Term: Fall 2017
SUN#: None
AGEC: None

Credit Breakdown: 2 Lectures, 3 Labs
Times for Credit: 1
Grading Option: A-F and S/U
Cross-Listed:

Description: Introduction to the acquisition, authentication, reconstruction, examination, and analysis of data stored on electronic media. Topics include: ethics, rules of evidence, hardware and software tools, various operating systems, forensic lab setup, and the investigational process. S/U grading option available. Prerequisites: CIS120, CIS121.

Prerequisites: CIS120, CIS121

Corequisites: None

Recommendations: None

Measurable Student Learning Outcomes
1. (Comprehension Level) Review and explain rules of evidence, as related to: seizure or acquisition of media, handling, marking and storage of electronic evidence, appropriate chain of custody, and right to privacy. (CSLO 2) 2. (Synthesis Level) Develop various recovery strategies for different types of computer investigations. (CSLO 3). 3. (Application Level) Use computer forensic tools and manual techniques to retrieve data. (CSLO 3) 4. (Analysis Level) Apply various data recovery protocols on MS Windows, DOS, Macintosh, Unix, and Linux operating systems. (CSLO 3) 5. (Analysis Level) Differentiate between the recovery of images and data. (CSLO 2) 6. (Synthesis Level) Create and implement a network forensic plan. (CSLO 4) 7. (Synthesis Level) Create a forensic investigation plan and demonstrate email investigation techniques, per given case studies. (CSLO 4)
Internal/External Standards Accreditation
None