CIS 276 - Computer Forensics

Description
This course introduces students to the forensic investigation of computer crime. Students study a branch of forensic science that deals with the investigation and recovery of materials found in digital devices, often due to criminal activity, and learn the tools and methods used to conduct investigations involving digital material. Topics include investigation tools, evidence acquisition and control, and writing investigation reports. Ultimately, students begin the journey to becoming skilled digital forensics investigators.

Credit Hours: 3
Contact Hours: 3
Prerequisites/Other Requirements: CIS 178 (C or Higher)
English Prerequisite(s): None
Math Prerequisite(s): None
Course Corequisite(s): None
Academic Program Prerequisite: None
Consent to Enroll in Course: No Department Consent Required
Dual Enrollment Allowed?: No
Number of Times Course can be taken for credit: 1
Programs Where This Course is a Requirement:
CyberSecurity, Certificate

Other Courses Where This Course is a Prerequisite: None
Other Courses Where this Course is a Corequisite: None
Other Courses Where This course is included in within the Description: None

General Education Requirement:
None
General Education Learner Outcomes (GELO):
NA
Course Learning Outcomes:

Identify the role of computer forensics in responding to crimes and solving business challenges.
Examine system forensics issues, laws, and skills.
Procure evidence in physical and virtualized environments.
Examine the impact of sequestration on the evidence-gathering process.
Collect evidence in network and e-mail environments.
Examine automated digital forensic analysis.
Report investigative findings of potential evidentiary value.
Examine the constraints on digital forensic investigations.
Clearly and completely state and describe a problem/issue.
Use well-designed search strategies to gather data and information.

Course Outline:
I. Introduction to Forensics

II. Overview of Computer Crime

III. Forensics Methods and Labs

IV. Collecting, Seizing, and Protecting Evidence

V. Understanding Information-Hiding Techniques

VI. Recovering Data

VII. Email Forensics

VIII. Windows Forensics

IX. Linux Forensics

X. Mac Forensics

XI. Mobile Forensics

XII. Performing Network Analysis

XIII. Incident and Intrusion Response

XIV. Trends and Future Directions

XV. System Forensics Resources

Approved for Online and Hybrid Delivery?:
Yes
Instructional Strategies:
Lecture: 30-60%

Lab work: 10-40%

Facilitated discussion: 0-20%

Group work: 0-10%

Mandatory Course Components:
None
Equivalent Courses:
None

Accepted GRCC Advanced Placement (AP) Exam Credit: None
AP Min. Score: NA
Name of Industry Recognize Credentials: None

Course prepares students to seek the following external certification:
No
Course-Specific Placement Test: None
Course Aligned with ARW/IRW Pairing: N/A

Mandatory Department Assessment Measures:
None

GRCC Course Type:
Program Requirement: Meets the learning needs of students in a specific GRCC program.
Course Format:
Lecture - 1:1
Total Lecture Hours Per Week: 3
People Soft Course ID Number: 104383
Course CIP Code: 11.9999
Maximum Course Enrollment: 24
Course Software Utilized: In our Digital Forensics course, we make extensive use of virtualization tools for i386 systems. This includes software such as VirtualBox or VMware Workstation.
Students who plan to use their own systems must ensure they have access to an i386-compatible machine. Most modern Apple devices with M1, M2, or M3 chips are not compatible. Alternatively, students can access our virtualization lab remotely.

School: School of STEM
Department: Computer Information Systems
Discipline: CIS
First Term Valid: Fall 2015 (8/1/2015)
1st Catalog Year: 2015-2016
Faculty Credential Requirements:
Master’s Degree (GRCC general requirement), Professionally qualified through work experience in field (Perkins Act or Other) (list below)
Faculty Credential Requirement Details:
4000 hours of Professional Network Security Administration or Post Graduate Degree in Information Security

Major Course Revisions: N/A
Last Revision Date Effective: 20260220T14:30:10
Course Review & Revision Year: 2030-2031