CJC-FRN7873 - Advanced Computer Forensics

Course Description

This course builds on the proficiency of forensic examiners. Additional focus will be given to more difficult practical exercises where the student will forensically search for emails, internet history and use advanced searches utilizing forensic software. This course is designed to make forensic examiners find more difficult files and data while improving their current skills. Students will produce reports for court testimony that will describe deleted disk space and other technical strategy used to enhance their testimony. Chain of custody forms and varied presentations to prosecutors will enhance the examiners skill. Live scenarios will be used to learn more difficult techniques in finding important evidence in a timely matter.

Course Outline

1. Overview of Intermediate Computer Forensics
2. Recognizing and recovering more difficult files and images
3. Describing deleted disk space and other forensic events
4. Chain of Custody Issues
5. Report writing and how to present in court
6. Practical exercises involving emails, internet history and other deleted files

Learner Outcomes

Upon successful completion of this course, the student will be able to complete the following:

• Locate difficult items and evidence hidden on suspect hard drives.
• Build on their expertise in all areas of forensic examinations.
• Additional experience in dealing with forensic chain of custody issues and a better ability to describe deleted disk space and other forensic evaluation terms for prosecutors and court issues.

Notes

Method of Instruction: Lecture, PowerPoint, Discussion and Practical

Evaluation:

• Exam:  Successfully complete practical activities, forensic examination report, and written exam.
• Demonstration of Skills:  Students must be able to show that they can utilize analysis tools and create a forensic examination report with effective written communication.
• Class Participation:  Every student must participate in practical activities in order to demonstrate understanding of concepts covered in class.