HARFORD COMMUNITY COLLEGE
401 Thomas Run Road - Bel Air, MD 21015
Course Syllabus
Computer Forensics – ISS 222
COURSE NUMBER: ISS 222
COURSE NAME: Computer Forensics
DIVISION: Business, Computing & Applied Technology
LECTURE/DISCUSSION: Total Hours - 45
SEMESTER CREDIT HOURS: 3
***************************************************************************************************************************** *********************
FEDERAL CREDIT HOUR DEFINITION STATEMENT : For a 15 week semester, each credit hour represents one hour of classroom or
direct faculty instruction and a minimum of two hours of outside class-work per week. For terms that are less than 15
weeks, students should also spend a minimum of two hours outside of class for every hour in class. Academic activities
include, but are not limited to reading, writing, studying, research, and completing worksheets. In addition, at least an
equivalent amount of out of class work is required for laboratory work, internships, practica, studio work, etc.
At Harford Community College, for all credit courses, students are expected to spend a minimum of 37.5 combined
hours of direct instructional time and related coursework time per credit hour. This course is a.3 credit course. This
course achieves the minimum of 112.5 hours of combined instructional time by requiring.37.5 hours of direct
instructional time and 75 hours of student work outside of direct instructional time.
********************************************************************************************
Textbook: Computer Forensics Cyber Crime – An Introduction, Marjie T. Britz. Pearson
3rd Edition 2013 ISBN: 978-0132677714
COURSE DESCRIPTION
This course introduces students to computer forensics, the emerging role of the computer
forensics examiner, forensic evidence preservation, and legal and ethical foundations. This course
provides a comparative study of information technology, evidence analysis, chain of custody, and
data retrieval from computer hardware and software applications. Students have hands-on
experiences using various computer forensic methods, evidence preservation techniques and
documentation. Prerequisites: CIS 210, ISS 111 and ISS 112. Course Fee.
1
STUDENT LEARNING OBJECTIVES
Student Learning Objectives Linked to Relevant Academic Outcomes
Upon satisfactory completion of this course, the student will be able to:
1. Use the correct investigating tools and procedures to maximize effectiveness of
evidence gathering. (Academic Outcome Supported by this Learning Objective:
Science and Technology)
2. Maintain evidence in pristine condition for it to be admissible in a legal action.
(Academic Outcome Supported by this Learning Objective: Science and
Technology)
3. Investigate large-scale attacks such as identity theft, fraud, phishing, extortion, and
malware infections. (Academic Outcome Supported by this Learning Objective:
Critical Thinking)
4. Demonstrate knowledge of the legal and ethical foundations for proper handling of
traditional and electronic evidence such as the Federal Rules of Evidence and
Procedure as well as the Fourth Amendment and other laws regarding search
warrants and civil rights. (Academic Outcomes Supported by this Learning
Objective: Communication; Critical Thinking)
5. Use practical tools such as FTK, EnCase, Passware, Ethereal, LADS, WinHex, GIMP,
Camouflage, Snort and other forensics application tools. (Academic Outcomes
Supported by this Learning Objective: Communication; Science and Technology)
COURSE OUTLINE
I.
II.
III.
IV.
V.
ADMISSIBILITY OF ELECTRONIC EVIDENCE
A. Forensic Evidence and Crime Investigation
B. Computer Forensics and Digital Detective Work
PREPARING FOR E-EVIDENCE COLLECTION AND PRESERVATION
A. Tools, Environment, Equipment, and Certifications
B. Policies and Procedures
FORENSIC EXAMINATION OF COMPUTERS AND DIGITAL AND ELECTRONIC
MEDIA
A. Operating Systems and Data Transmission Basics for Digital Investigation
B. Investigating Windows, Linux, and Graphics Files
C. E-Mail and Webmail Forensics
DETECTING INTRUSION, MALWARE, AND FRAUD
A. Internet and Network Forensics and Intrusion Detection
B. Tracking Down Those Who Intend to Do Harm on a Large Scale
C. Fraud and Forensic Accounting Investigation
LEGAL, ETHICAL, AND TESTIMONY TOPICS
A. Federal Rules and Criminal Codes
B. Ethical and Professional Responsibility in Testimony
2
COURSE POLICIES:
HCC students are bound by the academic policies outlined in the most current HCC Catalog.
It is the student’s responsibility to review these policies prior to the start of each semester.
INSTRUCTIONAL METHODS:
Online Lecture & Content Presentation
Online Discussion
Interactive Lecture
Online Labs
Tutorials
ONLINE ATTENDANCE AND PARTICIPATION:
Regular online attendance is required of all students. In the case of absence due to
emergency (illness, death in the family, accident), religious holiday, or participation in
official College functions, it is the student's responsibility to confer with the instructor
about the absence and missed course work. Since the majority of assignments are to be
completed according to a successive course schedule, regular online attendance and
participation, as directed, are key components to success in this course.
GRADING STANDARDS:
The final course grade is comprised of the student’s mastery of course requirements.
Course grades are based upon the following total mastery level:
A = 500
C = 300
F = 100 and below
B = 400
D = 200
Quizzes/Exercises
Article Review/Reaction Papers (4)
Midterm Exam
Project
Final Exam
Total points
= 100 points
= 100 points
= 100 points
= 75 points
= 125 points
500 points
CLASS PREPARATION:
All of the reading assignments must be completed before the class in which the material is
to be covered. Additional handouts will be posted to the class site regarding assignments
at the appropriate time. It is very important to read the assignments before completing
the assignment.
3
STUDENT BEHAVIOR:
Students will be familiar with and adhere to the “Code for Student Rights, Responsibilities
and Conduct”, which can be found on OwlNet under the My Academic Life Tab or in the
HCC online catalog. The Code outlines prohibited conduct, the disciplinary process, and
possible sanctions. Students found responsible for violating the Code will have a
disciplinary record that will remain in the Office of the Associate Vice President for Student
Development for three years.
DISABILITY SUPPORT SERVICES:
HCC is committed to serving students who have documented physical, learning,
psychological, or other disabilities. Students who have a disability are responsible for
contacting Disability Support Services at 443-412-2402 to discuss their needs for
accommodations. All information shared with Disability Support Services will be held in
confidence.
COMPUTER ETHICS:
Each student is responsible for knowing the college's policy relating to ethical behavior
regarding all intellectual property and in using the computer. Copying or using anthers
work, including computer files, is both illegal and unethical. See the Student Handbook.
ACADEMIC DISHONESTY:
Students will be familiar with and adhere to the policy governing academic dishonesty and
its sanctions as outlined in the Code for Student Rights, Responsibilities and Conduct, which
can be found on OwlNet under the My Academic Life Tab or in the HCC online catalog. (e.g.,
cheating, fabrication, facilitating academic dishonesty, and plagiarism) will be subject to
formal disciplinary action and will receive a grade of F on the test, quiz, or assignment
involved and, at the discretion of the instructor; the student may receive an F for the
course. This includes incidents that occur in the Test and Assessment Center. In addition,
the student will be referred to the Associate Vice President for Student Development for a
Student Code Violation.
SYLLABUS MODIFICATION:
The instructor reserves the right to modify and/or change the course syllabus with reasonable
notification to students.
COURSE REQUIREMENTS:
Regular Online Attendance, Midterm Exam, Class & Homework Assignments & Final Exam
4
STUDENT RESPONSIBILITIES







Students are responsible for completing all reading and writing assignments by the
scheduled due dates. Because effective writing usually comes through thoughtful
revision, students should revise and edit all work before submission. Students will
be given the opportunity to revise some assignments for a potentially higher grade.
To pass this course, students must complete all assignments, revise and correct
them as directed, and maintain a folder or portfolio of course work. At the end of
the semester, students will submit this folder to the instructor. The instructor will
keep folders until the deadline for grade appeal.
Students are responsible for recognizing and accepting that when they put their
name on any piece of work they are taking a vow that the work is theirs alone.
Academic dishonesty of any form is unacceptable.
Students are responsible for reading, discussing, and revising their work.
Students are responsible for providing thoughtful peer evaluation.
Student participation is crucial in this course and will be evaluated as part of your
grade.
Much of our work in class will be collaborative. It is therefore particularly important
that all of your work be completed on time. You will handicap not only yourself but
your classmates if you are not prepared.
MAKE-UP POLICY: PLEASE READ CAREFULLY!
Midterm and Final Exams: There will be no make-up exams except through arrangement
with the instructor prior to the exam (and then only for reasons deemed valid enough to
require the making-up of a new exam, which may be more difficult.)
CLASS PROJECT AND ASSIGNMENTS:
All of the reading assignments must be completed as indicated on the Class Schedule at the
end of this syllabus. Assignments will be given to review the text reading; a class project
will be assigned to apply the concepts from the course. Details will be posted on the
Blackboard site at the end of the 4th week of class
Students will also be required to complete and submit 4 article reviews for this course.
Each article review should relate to the concepts covered in the previous weeks assigned
chapter readings. Students may select articles from print or internet sources and must
provide specific source information at the end of their summary.
The article reviews will be graded based on completeness of the summary and how it
relates to the chapter concepts, grammar, spelling, and sentence structure. The length
should be no more than two double-spaced pages and word-processed using either MS
Word or an equivalent application. They must be submitted by 11:59pm on the due date
indicated. Please email directly to the instructor at tweston@harford.edu
5
DUE DATES:
To receive full credit, all assignments must be handed in by the due date. An assignment
will be accepted up to one week late and points will be deducted as follows:
1. One week late: 1/2 of overall points.
2. Thereafter, 0 points
It is the student's responsibility to justify any absences and make up all assignments.
For Student Services information and phone numbers go to
//www.harford.edu/studentservices/docs/Student_Services.pdf
Campus Computing and Technology Services- www.harford.edu or 443-412-2477
CLASS SCHEDULE - ISS 222
Week 1
Introduction to eLearning & Blackboard System
Week 2
Chapter 1
Assignments - None
Chapter 2
Assignments – Article Review & Reaction Paper
Chapter 3
Assignments – Reaction Paper #1 – Due 9/27
Chapter 4
Assignments
Chapter 5
Assignments – Article Review & Reaction Paper #2
Chapter 6
Assignments – Reaction Paper #2 – Due 10/11
Chapter 7
Midterm Exam
Chapter 8
Assignments – Article Review & Reaction Paper #3
Chapter 9
Assignments - Reaction Paper #3 – Due 11/1
Chapter 10
Assignments
Chapter 11
Assignments – Article Review & Reaction Paper #4
Chapter 12
Assignments – Reaction Paper Due – 11/22
Chapter 13
Assignments
Final Exam & Project Due
Week 3
Week 4
Week 5
Week 6
Week 7
Week 8
Week 9
Week 10
Week 11
Week 12
Week 13
Week 14
Week 15
Read Chapter 1
Read Chapter 2
Read Chapter 3
Read Chapter 4
Read Chapter 5
Read Chapter 6
Read Chapter 7
Read Chapter 8
Read Chapter 9
Read Chapter 10
Read Chapter 11
Read Chapter 12
Read Chapter 13
This schedule will be followed as closely as possible but is subject to change.
6