Syllabus~IS 234 Computer Forensics I

Instructor: Kris Townsend
Office Phone: 533.3246
Email: krist at spokanefalls.edu

Quarter: Fall 2009
Class Hours: RF 10:30 — 1:00
Office: 18-112A

Class Web Site

» http://faculty.spokanefalls.edu/ktownsend/is234
»Moodle: http://www.sfcc-iscs.us

Required Text and Materials

» Windows Forensics: The field guide for conducting corporate computer investigations
Chad Steel
Wiley, © 2006
0-470-03862-4

Course Description

This class teaches the process of computer forensics examination. This includes search and seizure, making forensically defensible copies of digital evidence, locating and reporting evidence, and presenting in court. Students learn by performing these steps in a simulated forensics lab environment.

Course Outcomes

Students will...

Understand the computer forensics process.
Understand the legal and ethical guidelines for Computer Forensics investigators.
Use various forensics software tools including FTK, hex viewers, and live CDs.
Practice proper handling of evidence.
Acquire FAT based storage devices.
Search, organize, and analyze acquired evidence.
Report the results investigations.

Prerequisites

» IS 132 Computer Ethics (This class operates at a high level and assumes that you have complete the first year of the Information Technology degree or have professional experience using a command line interface, configuring computer hardware, installing software, etc.)

Policies

Be responsible

Be professional. Your enrollment in this class indicates that you plan to work professionally in a technical field. That professionalism needs to start now, not then.
Do your own work. Working with others to solve problems and foster learning is encouraged. Blindly relying on the work of others is discouraged and considered cheating. Cheating is grounds for assigning a failing grade and it can be placed in your academic record.

Come to class

This class is designed for students to work together on a common set of problems and challenges in the presence of an instructor. Missing class or using class time to work on other projects greatly increases your risk for poor quality work or failure.
Excuses for absences are not asked for or accepted.
An excuse is needed only if you want a Z grade for the course.
Late work is not accepted and there are no makeups.
If you miss a class, check with another student to find out what you missed before the next class. Waiting to 'catch up' during the next class places the entire class at a disadvantage.
Contact your instructor via email before missing a 3rd consecutive day. I don't want to hear excuses, but I do want to know what your plan is for returning and catching up.
Missing 6 or more classes will result in a grade of 0.0.
Some assignments may be assigned as online activities in place of class. Completion of online activities counts for that day's attendance.

Conduct yourself with courtesy, respect, and consideration for others.

I do not want to share your attention with others. Engaging yourself with the computer or other electronic devices during lectures, demonstrations, and class discussions is distracting to other students and rude. You may be asked to leave at the discretion of the instructor.
Cell phones and pagers need to be turned off.
Leaving the class for food or a smoke is not allowed.
Food and drink are not allowed in the computer classroom.

Manage Your Files

Corrupted disks and computer failure will not be considered an acceptable excuse for missing a due date.
Backup your work every day on a separate disk.
Submit or complete each task at least 24 hours before each deadline. IT professionals know to make room for any technical problems could happen.

Moodle

You are expected to use Moodle in the following ways:

Upload your picture
Maintain a current email address
Check grades frequently

SFCC Statement on Diversity

In order for learning to take place, students must feel safe; this safety is due all students, not only those who share your values and beliefs. For this reason, courtesy, thoughtfulness, and acceptance are essential in our discussions in and out of the classroom. Acceptance should not be confused with agreement; one need not agree with a person to listen, and one must listen well in order to disagree respectfully. Every student in this course has a voice and so deserves the courtesy of attentive listening and the freedom to express diverse ideas.

Disability Support Services

If you have a health condition or disability that may require you to have accommodations in order to effectively participate in this class, please contact the Disability Support Services in Building 17, Room 201 (Phone 533-4166). Information about conditions or disabilities will be regarded as confidential.

Grading

Participation (20 days @ 10 points each)	200
Labs	100
Forensic Report	250
Total	550

Grading is determined by your placement on a 550 point scale.

Participation

Each day is worth 10 points for a maximum of 200 points.
5 points is given for not scraping your knuckles on the floor when you enter the room.
2 points is taken away for being late, or leaving early, or not paying attention. Both being late and leaving early would result in a 4 point deduction.
5 points is given for the quality of your participation. Quality participation will require proper study and preparation.
To prepare for class, be sure to complete the assigned readings. These will be posted at Moodle.
There are no makeups or late work. Excuses may get you sympathy, but they won't get you an exception.

Important Dates

Every day of class is important.

Case 1 Draft is due by 1:00pm, Nov. 24.

Case 1 Final Draft is due at 12:30, Dec 8.