Topics/Schedule:


Week    Topic                                           Resources

Week 1: Description of Class Requirements               Farmer Ch 1-2
        Basic Computer Forensic Terms and Ideas         Casey Ch 1-2
        Laws and History of Computer Crime
        Goal of Investigation

Week 2: Technology and Law                              Casey Ch 3
        U.S. Perspective
        Jurisdiction
        Privacy
        Katz v. United States
        Copywrite Laws
        DMCA

Week 3: Investigative Process / Methodology             Casey Ch 4
        Processing Digital Crime Scenes
        Documentation
        Physical Evidence
        Live vs. Dead Forensics
        Chain of Custody
        Civil vs. Criminal Law
        Sarbanes Oxley
        Locard's Principle
        Class Characteristics 

Week 4: Investigative Reconstruction                    Casey Ch 5-7
        Equivocal Forensic Analysis
        Reconstruction
        Analysis (Temporal, Relational, Functional)
        Victimology
        Risk-assessment
        Crime Scene Characteristics
        Reporting
        Case Studies

Week 5: Introduction to Linux                           Casey Ch 8.1-8.5
        Computer Basics
        Basic Operations of Computers
        Terms: BIOS, CMOS, CPU, Disk Boot, MBR
        Binary, Hex, ASCII
        RAM
        Windows Basic Forensics

Week 6: Live System Acquisition                         [Papers]
        Order of Volatility
        Memory Acquisition
        Process Memory
        Running Processes
        Open Ports
        Open Files
        Services

        HW: Self Audit 
        
Week 7: Analysis of live data                           [Papers]
        HW: Analysis of collected data

        Midterm Exam 
        
Week 8: Network Basics                                  Casey Ch 14

Week 9: Network Forensics                               Casey Ch 15-16

Week 10: Cygwin Overview and Installation               [Papers]
         Sleuthkit and Autopsy Installation
         Overview of tools
         Acquisition of a harddisk
         
         HW: Digital copy of disk image
         
Week 11: Harddrives                                     Casey Ch 8.1-8.5 
        IDE, SATA, SCSI
        Partitions

Week 12: Windows Forensics                              Casey Ch 10
        File System Basics
        
Week 13: Linux Forensics                                Casey Ch 11
        File System Basics

Week 14: Mac Forensics                                  Casey Ch 12
        File System Basics

Week 15: Handheld Devices                               Casey Ch 13

Week 16: Final Exam!