CJS 170 - Digital Forensics 1

3 credit hours - Three hours of lecture and directed laboratory weekly; one term.
Formerly CJS 207 - Cyber Forensics 1

Explore a professional approach to computer and cybercrime investigations. Learn to identify potential electronic evidence, create strategies to locate and recover evidence, and perform forensic analysis. Discuss legal and ethical considerations of computer crime investigations. Lab fee $60.

Prerequisite or Corequisite: CTS 107 ; or CTS 105 prior to Fall 2019.

Crosslisted: Also offered as CTS 170 ; credit is not given for CJS 170 and CTS 170 .

Course Outcomes:

Extract key concepts from cases and statutes.
- Review computer intrusion laws, intellectual property laws, trade secret offenses, system integrity offenses and misuse offenses.
Identify vulnerabilities and assess risks in forensic investigations.
- Apply a systematic approach to digital forensic investigations, including potential risks and mitigations.
Plan a forensic investigation.
- Preserve, extract and analyze digital forensic evidence.
- Prepare and submit documentation of forensic analysis.
- Prepare a forensic report.
- Prepare a presentation of forensic findings.
Identify where evidence may reside.
- Identify operating system file systems.
- Explain how file systems store data.
- Identify data of potential interest to a forensic investigation
Use software tools to access evidence and conduct forensic analysis.
- Use open source and commercial computer forensic tools for evidence acquisition and analysis.
- Prepare a presentation of forensic findings.
Explain legal limitations on searches and seizures of evidence.
- Explain Best Evidence.
- Create a Chain of Custody report.
- Explain the fourth, fifth and sixth amendment as applied to digital forensic investigations.