CSI 120W - Digital Forensics I

Credits: 3
Instructional Contact Hours: 3

Examines theory and practices of digital forensics by familiarizing students with sound forensic procedures such as: evidence handling, legal requirements, creation and verification of forensic copies, file and system types, documentation of forensic processes, live, logical, and physical acquisitions, and an introduction to network forensics. Credit may be earned in CSI 120W or CST 267 but not both.

Prerequisite(s): CSI 110W and CST 133W, both with a grade of “C” or better.
Corequisite(s): None
Lecture Hours: 45 Lab Hours: 0
Meets MTA Requirement: None
Pass/NoCredit: Yes

Outcomes and Objectives

Demonstrate cyber-incident response and performance requirements of the first responder.
Prepare accurate documentation of a digital forensics investigation.
Apply the basic principles of digital forensics imaging.
Demonstrate where digital data resides within a variety of digital devices.
Demonstrate how to handle digital media effectively upon responding to an incident.
Generate images of volatile and non-volatile data.
Generate hash values for collected data and forensic images.
Identify the various components of the Windows operating system.
Interpret the core principles of digital forensic investigations.
1. Identify evidence.
2. Preserve evidence.
3. Examine data.
4. Analyze results.
5. Report findings.
Identify the components of network forensic investigations.
1. Identify the OSI Model.
2. Identify network forensic techniques.
Interpret the rules of evidence as they apply to digital forensics investigations.
1. Examine the admissibility of evidence.
2. Analyze the need for a chain of custody.
3. Demonstrate fourth amendment requirements and exceptions.
Identify various laws as they relate to digital forensics investigations

Print this Page