CNS 320 Computer Forensic and Incident Response (Formerly CNS 320)

Summary

This course covers computer forensics as a profession, forensic tools, processing incident scenes and incident response, digital evidence controls, working with Windows and DOS systems, data acquisition, recovering image files, e-mail investigations, and analysis and reporting on forensics investigations.

Texts

Grading

Prerequisites

[March 28] Introduction. Chapter 1: Computer Forensics and Investigations as a Profession. PC Boot Process - Windows XP.
Workstation and Forensic Boot Disk Setup. Muick v. Glenayre.

[April 4] Incident Response. Chapter 4: Current Computer Forensics Tools.
US v. Rigas.
[April 11] Chapter 5 Processing Crime and Incident Scenes. Warrantless searches.
[April 18] Chapter 6: Digital Evidence Controls. Chapter 7: Windows and DOS Systems.
[April 25] Midterm
[May 2] Chapter 9: Data Acquisition. Chapter 10:Computer Forensics Analysis.
[May 9] Chapter 13: E-Mail Investigations. Possible guest speaker.
[May 16] Chapter 10 Computer Forensics Analysis (Continued).
[May 23] Chapter 11: Recovering Image Files.
[May 30] Chapter 14: Becoming an Expert Witness and Reporting Results of
Investigations. Final Exam Review.

School policies:

Changes to Syllabus

This syllabus is subject to change as necessary during the quarter. If a change occurs, it will be thoroughly addressed during class, posted under Announcements in D2L and sent via email.

Online Course Evaluations

Evaluations are a way for students to provide valuable feedback regarding their instructor and the course. Detailed feedback will enable the instructor to continuously tailor teaching methods and course content to meet the learning goals of the course and the academic needs of the students. They are a requirement of the course and are key to continue to provide you with the highest quality of teaching. The evaluations are anonymous; the instructor and administration do not track who entered what responses. A program is used to check if the student completed the evaluations, but the evaluation is completely separate from the student’s identity. Since 100% participation is our goal, students are sent periodic reminders over three weeks. Students do not receive reminders once they complete the evaluation. Students complete the evaluation online in CampusConnect.

Academic Integrity and Plagiarism

This course will be subject to the university's academic integrity policy. More information can be found at http://academicintegrity.depaul.edu/ If you have any questions be sure to consult with your professor.

All students are expected to abide by the University's Academic Integrity Policy which prohibits cheating and other misconduct in student coursework. Publicly sharing or posting online any prior or current materials from this course (including exam questions or answers), is considered to be providing unauthorized assistance prohibited by the policy. Both students who share/post and students who access or use such materials are considered to be cheating under the Policy and will be subject to sanctions for violations of Academic Integrity.

Academic Policies

All students are required to manage their class schedules each term in accordance with the deadlines for enrolling and withdrawing as indicated in the University Academic Calendar. Information on enrollment, withdrawal, grading and incompletes can be found at http://www.cdm.depaul.edu/Current%20Students/Pages/PoliciesandProcedures.aspx.

Students with Disabilities

Students who feel they may need an accommodation based on the impact of a disability should contact the instructor privately to discuss their specific needs. All discussions will remain confidential.
To ensure that you receive the most appropriate accommodation based on your needs, contact the instructor as early as possible in the quarter (preferably within the first week of class), and make sure that you have contacted the Center for Students with Disabilities (CSD) at:
Lewis Center 1420, 25 East Jackson Blvd.
Phone number: (312)362-8002
Fax: (312)362-6544
TTY: (773)325.7296