Central Arizona College Back
CIS 157 Computer Forensics and Investigation
Credit Hours:  3
Effective Term: Fall 2018
SUN#: None
AGEC: None  
Credit Breakdown: 2 Lectures, 3 Labs
Times for Credit: 1
Grading Option: A-F and S/U

Description: Introduction to the acquisition, authentication, reconstruction, examination, and analysis of data stored on electronic media. Topics include: ethics, rules of evidence, hardware and software tools, various operating systems, forensic lab setup, and the investigational process. S/U grading option available. Prerequisites: CIS120, CIS121.

Prerequisites: CIS120, CIS121

Corequisites: None

Recommendations: None

Measurable Student Learning Outcomes
1. (Comprehension Level) Review and explain rules of evidence, as related to: seizure or acquisition of media, handling, marking and storage of electronic evidence, appropriate chain of custody, and right to privacy. (CSLO 2)
2. (Synthesis Level) Develop various recovery strategies for different types of computer investigations. (CSLO 3).
3. (Application Level) Use computer forensic tools and manual techniques to retrieve data. (CSLO 3)
4. (Analysis Level) Apply various data recovery protocols on MS Windows, DOS, Macintosh, Unix, and Linux operating systems. (CSLO 3)
5. (Analysis Level) Differentiate between the recovery of images and data. (CSLO 2)
6. (Synthesis Level) Create and implement a network forensic plan. (CSLO 4)
7. (Synthesis Level) Create forensic investigation plans and demonstrate e-mail, social media, and cloud investigation techniques, per given case studies. (CSLO 4)
8. (Comprehension Level) Explain how to approach investigating social media communications. (CSLO 2)
9. (Comprehension Level) Explain standard procedures for conducting forensic analysis of virtual machines. (CSLO 2)
Internal/External Standards Accreditation