NET 730 - Computer Forensics & Inv.

Credits: 3
Lecture Hours: 2
Lab Hours: 2
Practicum Hours: 0
Work Experience: 0
Course Type: Voc/Tech

An introductory course intended for system administrators providing training in detecting and analyzing data stored or often hidden on computer systems. The course prepares students to use computer forensics tools to uncover violations of company policy, embezzlement, email harassment, leaks of proprietary information, and criminal activity.
Prerequisite: NET 612
Competencies

Discuss the history and future of Computer Forensics
Discuss legal, ethical, and professional issues related to Computer Forensics
Outline the steps involved in a computer investigation
Identify equipment needed for a computer investigation
1. Identify components of a forensics workstation
2. Identify security issues related to a computer investigation
3. Develop a plan for an effective computer forensics lab
Examine and use Computer Forensics software tools.
Understand digital evidence controls
1. Define digital evidence
2. Process and handle digital evidence
3. Store digital evidence correctly
Plan data recovery contingencies
1. Use acquisition tools to recover data
2. Examine and explain file systems
Understand computer forensics analysis
1. Use software tools to analyze computer data
2. Explain data-hiding techniques
3. Create computer forensics analysis reports
Understand network forensics
1. Examine software tools used in network forensics
2. Examine security issues related to network forensics
Conduct e-mail investigations
1. Identify e-mail crimes and violations
2. Examine e-mail server systems
3. Examine e-mail logs and trace e-mail messages