CNIT 121: Computer Forensics
Spring 2015 Sam Bowne
CRN 36682 Mon 6:10 - 9 pm SCIE 200
Scores
Open Lab Hours for Sci 214
Schedule · Lectures · Projects · Speakers · Links · Home Page
CNIT 121: Computer ForensicsSpring 2015 Sam BowneCRN 36682 Mon 6:10 - 9 pm SCIE 200ScoresOpen Lab Hours for Sci 214Schedule · Lectures · Projects · Speakers · Links · Home Page |
|
TextbookComputer Forensics Infosec Pro Guide by David CowenPublisher: McGraw-Hill Osborne Media; 1 edition (March 13, 2013) Sold by: Amazon Digital Services, Inc. ASIN: B00BPO7AP8 Kindle edition: $25, Paper edition: $27 (prices I saw on 11-19-13 at Amazon) Buy from Amazon |
Catalog DescriptionThe class covers forensics tools, methods, and procedures used for investigation of computers, techniques of data recovery and evidence collection, protection of evidence, expert witness skills, and computer crime investigation techniques. Includes analysis of various file systems and specialized diagnostic software used to retrieve data. Prepares for part of the industry standard certification exam, Security+, and also maps to the Computer Investigation Specialists exam.
Examine computer media to discover evidence.
|
Schedule | |||
|---|---|---|---|
| Mon 1-12 | 1 What is Computer Forensics? & 2 Learning Computer Forensics | ||
| Mon 1-19 | Holiday--No Class | ||
| Mon 1-26 | 3 Creating a Lab | ||
| Fri 1-30 | Last Day to Add | ||
| Mon 2-2 | 4 How to Approach a Computer Forensics Investigation | ||
| Mon 2-9 | Quiz: Ch 1-4 Proj 1 & 2 due * |
5 Choosing Your Procedures | |
| Mon 2-16 | Holiday--No Class | ||
| Mon 2-23 | Quiz: Ch 5 |
6 Testing Your Tools & Best Practices | |
| Mon 3-2 |
Guest Speaker: No Quiz, no Proj due
Conrad del Rosario Please read this case document before the talk | ||
| Mon 3-9 | Quiz: Ch 6 &
Best Practices Proj 3 & 4 & 5 due * |
7 Live vs. Postmortem Forensics | |
| Mon 3-16 | Quiz: Ch 7 Proj 6 & 7 due |
8 Capturing Evidence | |
| Mon 3-23 | Quiz: Ch 8 Proj 8 & 9 due * |
9 Nontraditional Digital Forensics | |
| Wed 3-25 | Mid-term grades due | ||
| Mon 3-30 | Holiday--No Class | ||
| Mon 4-6 | Quiz: Ch 9 Proj 10 & 11 due * |
10 Establishing the Investigation Type and Criteria & 11 Human Resources Cases | |
| Mon 4-13 | Quiz: Ch 10 & 11 Proj 12 & 13 due |
12 Administrator Abuse | |
| Thu 4-16 | Last Day to Withdraw | ||
| Mon 4-20 | Quiz: Ch 12 Proj 14 due |
13 Stealing Information | |
| Mon 4-27 | Quiz: Ch 13 Proj 16 due |
14 Internal Leaks | |
| Mon 5-4 | Quiz: Ch 14 & Proj 17 Proj 17 & 18 due |
15 Keyloggers and Malware | |
| Mon 5-11 | Last Class: No Quiz All Extra Credit Proj due |
16 Documenting Your Findings with Reports & 17 Litigation and Reports for Court and Exhibits | |
| Mon 5-18 | Final Exam | ||
| * Requires DVD--available in SCIE 214 | |||
Speaker Biography |
|---|
|
Conrad del Rosario
Graduated law school in 1991 and have worked as a prosecutor for over 20 years. Worked in various criminal units at the SF DA's office including domestic violence, sexual assault, and narcotics before working identity theft and high technology crimes. Currently the managing attorney for the Economic Crimes Unit, part of our White Collar Division, where I oversee 5 attorneys including the high technology and identity theft teams. Currently assigned to the Rapid Enforcement Allied Computer Team (REACT) Task Force which is a consortium of local law enforcement agencies investigating high technology crimes based out of Silicon Valley, member of HTCIA, and currently a certified instructor for Peace Officer Standards and Training (POST) in the area of High Technology Investigations.
|
