CIS-276: Digital Forensics

Business, Entrepreneurship, & Professional Development
Computer Information Systems
Academic Level
Course Subject
Computer Information Systems
Course Number
Course Title
Digital Forensics
Credit Hours
Instructor Contact Hours Per Semester
62.00 (for 15-week classes)
Student Contact Hours Per Semester
62.00 (for 15-week classes)
Grading Method
CIS-100, with a grade of "C" or better.
Catalog Course Description

Examine the fundamental principles, theory and application of computer investigations, computer forensics tools, information protection, professional development and cybersecurity. Explores various types of cybercrime and investigative techniques. Students will discuss emerging technologies used in law enforcement in relation to computer-related crimes scenes, evidence collection and analysis. Students will evaluate and synthesize technical and legal issues in relation to digital evidence. Students will apply various skills and techniques, combined with numerous investigative software tools to analyze seized electronic media. Students subject to background investigation prior to admittance.

Goals, Topics, and Objectives

Core Course Topics
  1. What is Computer Forensics?
  2. Investigating Cyber Crime
  3. Legal Issues Relating to Cyber Crime Investigation
  4. The Role of Law Enforcement and the Courts Regarding Computer Forensics
  5. Social, Legal and Technological Aspects in Computer Forensics
  6. Computer Forensics Reporting
  7. Digital Forensics Profession and Investigations
  8. Data Acquisition
  9. Windows, Linux and Macintosh File Systems
  10. Digital Forensic Tools
  11. Email and Social Media Investigation
  12. Mobile Device Forensics
Core Course Learning Objectives (Separated)
  1. Explain the field of digital forensics.
  2. Restate limitations on expectation of privacy.
  3. Identify and discuss the categories of computer crimes and what constitutes a cybercrime.
  4. Summarize how to prepare a digital forensic investigation using a systematic approach.
  5. Describe how to prepare a digital forensic investigation for the public and private sector.
  6. Restate how to conduct an investigation including critiquing a case.
  7. Describe types of fraud and investigative techniques.
  8. Describe certification and physical requirements for digital forensic labs.
  9. Discuss data acquisition methods, tools and validation. Explain acceptable methods for searching and analyzing evidence.
  10. Explain guidelines for processing law enforcement crime scenes (digital evidence storage and hashes).
  11. Differentiate Windows, MacOS and Linux file system structures.
  12. Use digital forensic software and hardware tools.
  13. Define digital graphics and audio file formats.
  14. Apply procedure of a live acquisition, analysis of virtual machines, network forensics and network monitoring tools.
  15. Summarize email and social media investigations.
  16. Summarize mobile device and cloud forensics.
  17. Describe guidelines for report writing for high-tech investigations.
  18. Demonstrate the responsible, ethical, and professional behavior required for expert witness testimony.Summarize the rules of evidence and legal foundations.
  19. Summarize courtroom procedures and effective testimony.

Assessment and Requirements

Assessment of Academic Achievement

Students will be assessed through tests, quizzes, in-class activities/presentations, case studies, outside assignments, and/or class participation.


Satisfies Wellness Requirement

Approval Dates

Effective Term
Fall 2019
ILT Approval Date
AALC Approval Date
Curriculum Committee Approval Date