CFOR 150

Introduction to Computer Forensics (3 CR)

Prerequisites: CIS 134 and CPCA 139 and assistant dean's approval

In this course, students are introduced to computer forensics and incident response essentials. This course shows the student how to collect and analyze the digital evidence left behind in a digital crime scene. Computer forensics, the newest branch of computer security, focuses on the aftermath of a computer security incident. The goal of computer forensics is to conduct a structured investigation to determine exactly what happened and who was responsible and to perform the investigation in such a way that the results are useful in a criminal proceeding and to lay the foundation for further study of computer forensics. Prior to attending the course, students will be required to complete a background check through Clarence M. Kelly and Associates at their own expense. To receive information on "how to apply for a background check," please send an email to Ginger Henderson ghenderson@jccc.edu with "Background Check" as the subject. 3 hrs. lecture/wk.

CFOR 180

File Structure & Residual Artifacts (3 CR)

Prerequisite: CFOR 150

This course provides the basic understanding of how computers 'see' data and manage its storage. While covering physical device concepts, students will learn the boot process of a computer. The FAT file system will then be described in terms of system areas created during the format process, the File Allocation Table and its function and detailed information regarding saving files and directories - to include a full breakdown of directory entries. In addition, concepts of clusters and file slack space will be covered and led into how to identify the affects of deleting files and forensic issues surrounding their recovery. The students will learn how to use hardware and software write protection tools to create duplicate images of hard disk drives, USB thumb drives and other alternate media. Mastery of technical knowledge will be combined with problem-solving skills to aid students in developing creative and adaptive responses to future changes in technology. This course meets for two hours of lecture and two hours of laboratory each week. 2 hrs. lecture 2 hrs. lab/wk.