IT System Analysis

Course Overview

Course Description:

“A methodological series of techniques and procedures for gathering evidence, from computing equipment and various storage devices and digital media, that can be presented in a court of law in a coherent and meaningful format.”

Course Topics:

Introduction to Computer Forensics

Teach students how to conduct forensic examinations, establish chains of custody, and how to handle and preserve digital media safely. Computer forensic students learn about the types of crimes associated with computer evidence, and they gain professional-level knowledge about related legal and privacy issues.

Cybercrime

Familiarizes students with the types of crime that can occur through computers and the Internet, such as e-mail scams, identity theft, hacking, Internet harassment, and phishing. Students learn investigation techniques and discuss how cybercrime is changing and growing. Often, the course covers ways to present evidence in a cybercrime case.

Mobile Forensics

In this course, students will sharpen their skills concerning analyzing data found on mobile devices. Instructors will emphasize steps for conducting investigations and properly obtaining evidence for these types of cases. Students will also learn about digital and analog communications networks and other related cellular technologies. Instructors may also address how to extract data from these devices using various techniques.

Learning Agreement Semester

Curriculum

Coverages:

Main lecture materials (pdf format) [14]
Additional materials and/or references (multi formats) [14]
Lectures Recording (video format) [14]
Quiz (real-time) [2]
Assignments [2]
Project Based Learning [1]
Home works [6]

Sequence/Methods:

Online deliver of topics 1 to 7, including assignment 1, quiz 1 and Homework 1-3 (materials/instructions are downloadable)
Mid Test (real-time)
Online deliver of topic 8 to 14, including assignment 2, quiz 2, Homework 4-6 and PBL (material/instructions are downloadable)
Final Test

Objectives:

The preservation, identification, extraction, interpretation, and documentation of computer evidence, to include the rules of evidence, legal processes, integrity of evidence, factual reporting of the information found, and providing expert opinion in a court of law or other legal and/or administrative proceeding as to what was found;

The science of capturing, processing, and investigating data from computers using a methodology whereby any evidence discovered is acceptable in a Court of Law.

Plenned Learning Activities