NET 182: Computer Forensics

Course Description

Provides students with a comprehensive introduction to computer forensics: the preservation, identification, extraction, documentation and interpretation of computer data. Topics include computer forensics tools, file systems and disk structures, information analysis, and proper incident response techniques. Recommended preparation: NET 111 and NET 112 or equivalent experience.

Course OutlineComputer Forensics and Investigations

  1. Computer Forensics and Investigations as a Profession
  2. Understanding Computer Investigations
  3. The Investigator's Office and Laboratory
  4. Current Computer Forensics Tools
  5. Processing Crime and Incident Scenes
  6. Digital Evidence Controls
  7. Working with Windows and DOS Systems
  8. Macintosh and Linux Boot Processes and File Systems
  9. Data Acquisition
  10. Computer Forensics Analysis
  11. Recovering Image Files
  12. Network Forensics
  13. E-Mail Investigations
  14. Becoming an Expert Witness and Reporting Results of Investigations

Required Materials

  • Guide to Computer Forensics and Investigations – Course Technology – ISBN-10: 1418067334  ISBN-13: 9781418067335
  • Internet access and a Harper Blackboard account.
  • A computer that can be partitioned, reformatted, etc.  As an alternative, you can use a PC with VMWare to create virtual machines for many of the lab exercises.  Harper lab I 205 has computers and software that may be configured as necessary for this course.

Faculty Contact

For questions about this course contact the department coordinator:

Dave Braunschweig
dbraunsc@harpercollege.edu
847.925.6817