| Course Title: | Digital Forensics I With Lab |
|---|---|
| Course Number: | CCSI410 |
| Course Description: | This course introduces the study of forensics by outlining integrative aspects of the discipline with those of other sciences. Coursework focuses on applying basic forensic techniques used to investigate illegal and unethical activity within a PC or local area network (LAN) environment and then resolving related issues. |
| Course Prerequisites: | CCSI330 and CIS246/5-4 |
Syllabus
Course Information
Course Specific Requirements
Enter content here, if necessary.
Software Citation Requirements
This course uses open-source software, and as the end users of this software, students are required to cite the software for any student work, such as assignments, labs, or projects, where the software has been utilized. Open-source software does have end-user license agreements, and all students should read the entire agreement for a software prior to installation or usage. In order to use the software in this course, software citations have been created for students and can be located on the Open Source Applications page. These software citations must be included in all student work submissions that have used the software.
Textbooks and Resources
Required Textbooks
The following books are required for this course:
Guide to Computer Forensics and Investigations
3rd Edition
by Bill Nelson, Amelia Phillips, Frank Enfinger, and Christopher Steuart
2007 Course Technology
E-book Details
First Time Using VitalSource? Step 1: View the VitalSource Video Step 2: Register with VitalSource Bookshelf Online
Step 3: Access the Desktop and Mobile Versions | Already Registered? 3 Ways to Access Your eBooks
|
To find out more about VitalSource Bookshelf, check out the VitalSource FAQ.
Physical Books and Supplies
Your course may require additional materials, such as a course kit. Visit the online bookstore if you have not yet ordered your books and supplies.
Campus Additional Information
Enter content here, if necessary.
Terminal Course Objectives
DeVry University course content is constructed from curriculum guides developed for each course that are in alignment with specific Terminal Course Objectives. The Terminal Course Objectives (TCOs) define the learning objectives that the student will be required to comprehend and demonstrate by course completion. The TCOs that will be covered in detail each week can be found in the Objectives section for that particular week. Whenever possible, a reference will be made from a particular assignment or discussion back to the TCO that it emphasizes.
1
Given the history of forensic science and its integration with the other sciences, describe forensic science as it exists today and extrapolate future developments in the field.
2
Given a crime scene scenario, students will attain proficiency in the application of techniques such as physical collection, securing and/or transporting computer evidence from a crime scene, and verifying ownership of a known perpetrator.
3
Given a hypothetical criminal investigation, students will be able to conduct a “risk analysis” on the suspect’s drive.
4
Given a hypothetical criminal investigation, students will be able to make an examination copy or clone of a known suspect’s storage media.
5
Given a hypothetical criminal investigation, students will be able to formulate an analysis plan for a clone specifying the tools and methods that will be used.
6
Given a clone or the suspect’s drive, the student will locate and recover hidden, deleted, and encrypted files using file signature matching, decryption, and steganography detection tools.
7
Given a clone, the student will be able to conduct search string on suspect data.
8
Given a hypothetical criminal investigation, the student will be able to document the processes.
9
Given a hypothetical criminal investigation with an unknown suspect, students will be familiar with techniques on how to identify the suspect through technological means.
10
Given a hypothetical criminal investigation with a completed analysis, the student will be able to report and present findings in both an oral and written format.
Lab Schedule
Skillsoft SSO(example: "ssoType=DVUHubSSO2&node=skillSoftSSO&orgCode=org_##"):
Week 1
None
Citrix
RKON
Skillsoft
Toolwire
WebServer
ACC COMAT
ACC NonCOMAT
CWP
Week 2
None
Citrix
RKON
Skillsoft
Toolwire
WebServer
ACC COMAT
ACC NonCOMAT
CWP
Week 3
None
Citrix
RKON
Skillsoft
Toolwire
WebServer
ACC COMAT
ACC NonCOMAT
CWP
Week 4
None
Citrix
RKON
Skillsoft
Toolwire
WebServer
ACC COMAT
ACC NonCOMAT
CWP
Week 5
None
Citrix
RKON
Skillsoft
Toolwire
WebServer
ACC COMAT
ACC NonCOMAT
CWP
Week 6
None
Citrix
RKON
Skillsoft
Toolwire
WebServer
ACC COMAT
ACC NonCOMAT
CWP
Week 7
None
Citrix
RKON
Skillsoft
Toolwire
WebServer
ACC COMAT
ACC NonCOMAT
CWP
Week 8
None
Citrix
RKON
Skillsoft
Toolwire
WebServer
ACC COMAT
ACC NonCOMAT
CWP
Course Schedule
| Week, TCOs, and Topics | Readings and Class Preparation | Activities and Assignments |
|---|---|---|
Week 1 TCOs 1 and 2 | Chapter 1: Computer Forensics and Investigations as a Profession | Lab 1: Logging in to the Environment |
Week 2 TCO 3 | Chapter 2: Understanding Computing Investigations | Lab 2: Creating a Clone |
Week 3 TCOs 4 and 5 | Chapter 4: Data Acquisitions | Lab 3: Risk Analysis and Repair |
Week 4 TCO 6 | Chapter 6: Working with Windows and DOS Systems | Lab 4: Keyword and Statistical Searching |
Week 5 TCOs 7 and 8 | Chapter 7: Current Computer Forensic Tools | Lab 5: Steganography Detection |
Week 6 TCO 9 | Chapter 11: Network Forensics | Lab 6: E-mail Headers Graded |
Week 7 TCO 10 | Chapter 9: Computer Forensics Analysis | Lab 7: File and Data Recovery |
| Week 8 All TCOs | Final Exam | |
Blended E-Learning
This course is an 8-week, intensive course that includes both classroom-based and e-learning activities. Your participation in both areas is essential to your success in this course. You should expect to spend time each week participating in the prescribed activities both before and after our class meeting.
Participation before, during, and after class meetings is critical to your success in this intensive environment.
To get the most out of our weekly class meetings, it is essential that you come to class prepared. The weekly readings listed in the Course Schedule will prepare you for class. Our class meetings, in turn, will prepare you for upcoming exams and assignments.
Through the DeVry e-learning platform, you will be able to
- review the Syllabus and weekly assignment information;
- submit completed work for grading;
- take quizzes and exams;
- obtain copies of class handouts and notes;
- e-mail the instructor and other students; and
- participate in online discussion of class material.
iConnect Live
This course contains iConnect Live sessions that provide students with the opportunity to attend live presentations, which cover course materials, projects, and assignments. Please see the iConnect Live items for the days and times of the live sessions and for the link to enter each session. You will also receive e-mail reminders each week.
If you are unable to attend the live session, you can watch the recorded session by clicking on the Recordings link that will appear in the iConnect Live item after the lecture has concluded. Please contact your instructor with any questions.
Please note that because of unavoidable technological issues and presenter availability, the live lectures may be substituted with prerecorded lectures.
Due Dates for Assignments & Exams
Unless otherwise specified, the following applies.
- Access to most weeks begins on Sunday at 12:01 a.m. mountain time (MT).
- All assignments are to be submitted on or before Sunday at the end of the specified week that they are due, by 11:59 p.m. (MT).
- All quizzes and exams are to be completed on or before Sunday at the end of the specified week that they open, by 11:59 p.m. (MT).
Week 8 opens at 12:01 a.m. (MT) on the ending Sunday of Week 7. Any assignments or exams must be completed by 11:59 p.m. (MT) Saturday of the eighth week.
Due Dates for Assignments & Exams
All assignments, quizzes, and exams are to be completed per the schedule indicated by your instructor.
Assignment Values and Letter Grades
The maximum score in this class is 1,000 points. The categories, which contribute to your final grade, are weighted as follows.
| Assignment | Points | Weighting |
|---|---|---|
| Discussions (30 points, Weeks 1-7) | 210 | 21% |
| Midterm Exam | 160 | 16% |
| Labs (60 points, Weeks 1-7) | 420 | 42% |
| Final Exam | 210 | 21% |
| Total Points | 1,000 | 100% |
All of your course requirements are graded using points. At the end of the course, the points are converted to a letter grade using the scale in the table below.
| Letter Grade | Points | Percentage |
|---|---|---|
| A | 900–1,000 | 90% to 100% |
| B | 800–899 | 80% to 89% |
| C | 700–799 | 70% to 79% |
| D | 600–699 | 60% to 69% |
| F | 599 and below | Below 60% |
DeVry Graduate Academic Policy and Relevant Resources
DeVry Undergraduate Academic Policy and Relevant Resources
Frequently Asked Questions
When are grades calculated, and how can I view my grades?
- You must complete any quizzes and post your written assignments (if necessary) to the weekly Dropbox by Sunday 11:59 p.m. (MT) each week, except Week 8 which closes at 11:59 p.m. (MT) Saturday.
- Once your work is reviewed, you should see comments and total points for each assignment in the Gradebook. Instructors should have Discussion work graded by the following Tuesday and all other assignments by the following Friday.
- You may check your progress at any time by going to the Gradebook, selecting the week and then your name.
- Click on the points earned for each assignment in the Gradebook to see any instructor comments.
What should I do if a discrepancy is found with my grade?
- Double-check the error and try to determine what caused it.
- Send your instructor an email explaining your findings.
- Trust that any error in grading will be corrected quickly
What if I cannot get my work submitted on time?
- If you have an emergency that will cause your work to be late, please contact your instructor in advance of the due date so that arrangements can be made. Your instructor may reserve the right to deduct points for work turned in late based on the reason and the timeliness of notice.
- If a technical problem prevents you from meeting the scheduled due date, please contact the Help Desk at 1-800-594-2402 and immediately email your instructor about the situation.
How can I get extra credit?
Extra credit is not an option.
Questions and Concerns
Please feel free to contact me for help with coursework or other areas that may impact your progress. Here are some examples.
- Do you have general questions about attendance, deadlines regarding your courses, student financial aid, or other areas?
- Are you a member of the military service? Do you need to adjust your schedule due to active duty, or do you have questions about your GI Bill® benefits or have other unforeseen military and veteran-related issues that have developed?
- Do you need supplementary student assistance? Please let me know if you are having academic difficulty and would like an ADA accommodation. Although I can talk with you about getting assistance, an excellent point of contact is the Office of Student Disability Services. You can reach the Office by calling 877-496-9050, option 3, or by e-mailing adaofficer@devry.edu or adaofficer@keller.edu.
Regardless of your situation, please feel free to contact me for assistance in whatever area of concern you might have. I will do everything I can to assist you or put you in contact with University colleagues who are trained to assist you in whatever area of concern you might have.
"GI Bill® is a registered trademark of the U.S. Department of Veterans Affairs (VA). More information about education benefits offered by the VA is available at the official U.S. government website: www.benefits.va.gov/gibill.”