Title: Syllabus
Course: IN 2005 Digital Forensics

IN2005 Digital Forensics

Butler Community College
Division: Career Technical Education

Andover KS

Course: Digital Forensics
CRN: 11111
Semester: 201610

Class Information
CRN | Meeting Day(s) | Meeting Time | Site | Building | Room
11111 | Online |  |  |  |

INSTRUCTOR INFORMATION

Instructor Name: John Smith

Instructor Contact Information:

Office:

Phone:
E-mail:

COURSE INFORMATION

Course Description

Digital Forensics. 3 hours credit. Prerequisites: IN 2001 with a C or better. This course will enable the student to understand and implement principles and procedures of data forensics.  The student will learn about proper equipment seizure methodology, confiscated materials analysis, and follow up processes relating to an incident.

Required Materials

Phillips, A., Nelson, B., Steuart, C., & Enfinger, F., Guide to computer forensics and investigations. Boston, MA: Course Technology.

Supplemental Materials

N/A

Butler-Assessed Outcomes

The intention is for the student to be able to:

1. Investigate digital incidents.

2. Use forensic tools to analyze and acquire data.

3. Secure evidence.

Learning PACT Statement

Butler prepares students to be principled, productive individuals who are responsible, involved lifelong learners. To accomplish this goal Butler has established a Learning PACT for the skills that learners need during their career and has integrated PACT skill-building activities and assessments through a variety of program coursework, extra-curricular activities and other learning opportunities.

The BCCC Learning PACT consists of:

- P = Personal Development Skills
- A = Analytical Thinking Skills
- C = Communication Skills
- T = Technological Skills

The Learning PACT Skills are vital for any adult to function successfully in the ever changing world of the 21st century. Butler expects learners to be full partners in the learning process and as such to assume primary responsibility for their own choices.

Learning PACT Skills

Technological Skills

1. Discipline-specific technology - Through the evaluation, analysis, and configuration of an IT environment, the student will demonstrate the ability to investigate and secure digital evidence using forensic tools.

Major Summative Assessment Task(s)

These learning outcomes and Learning PACT skills will be demonstrated by:

Completing a summative project involving forensic analysis of digital data.

Computer Use Expectation

Butler Community College expects students to be able to use computers, Internet and web-based materials proficiently both inside and outside the classroom to accomplish course outcomes.  Courses may have discipline specific software requirements which will be denoted by schedule type “X”.  For any specific software requirements, refer to either the course outlines at xxxxx or the bookstore at xxxxx.

Butler Community College expects students to be engaged in the learning process.  Engaged students are motivated, prepared for class, interact inside and outside of class with other students and faculty and take responsibility for their own learning.

CLASS INFORMATION

Methods of Grading and Evaluation

The student will be evaluated on the basis of his/her performance on the following:

Grading Components
Items | Points
Total Points | 1752
Quizzes | 460
Extra Credit | 11
Exams | 231
Hands on Projects | 260
Case Projects | 540
Discussion | 150
MSAT | 100

Graded components subject to change as needed to facilitate the learning environment.

Grading Scale
Grade | Percentage | Points
A | 90 - 100 | 1577 - 1752
B | 80 - 89 | 1402 - 1576
C | 70 - 79 | 1226 - 1401
D | 60 - 69 | 1051 - 1225
F | 0 - 59 | 0 - 1050

Class Schedule
Week | Date | Learning Activities
1
01/17-01/24
· Review Syllabus

· Introductions

· Chapter 1 - Computer Forensics and Investigations as a Profession

· Chapter 1 Case Project 1-1 (Two pages. Must include sources.)
2 | 01/24-01/31 | · Chapter 2 - Understanding Computer Investigations · Chapter 2 Case Projects 2-1, 2-2, 2-3, 2-4
3 | 01/31-02/07 | · Chapter 3 - Planning for  Contingencies · Chapter 3 Case Project 3-1
4 | 02/07-02/14 | · Chapter 4 – Data Acquisition · Chapter 4 Case Project 4-2, 4-3, 4-4
5 | 02/14-02/21 | · Chapter 5 - Processing Crime and Incident Scenes · Chapter 5 Case Projects 5-2
6 | 02/21-02/28 | · Chapter 6 - Working with Windows and DOS Systems · Chapter 6 Case Project 6-2
7 | 02/28-03/06 | · Chapter 7 – Current Computer Forensics Tools · Chapter 7 Case Project 7-4
8
03/06-03/13
· Chapter 8 - Macintosh and Linux Boot Processes and File Systems

· Chapter 8 Case Project 8-2

· Midterm Exam Chapters 1 – 7

· MSAT Assigned
9 | 03/13-03/20 | Spring Break
10
03/20-03/27
· Chapter 9 - Computer Forensics Analysis and Validation

· Chapter 9 Case Projects9-2, 9-3

· Chapter 10 - Recovering Graphics Files

· Chapter 10 Case Project 10-2, 10-3
11 | 03/27-04/10 | · Chapter 11 - Virtual Machines, Network Forensics, and Live Acquisitions · Chapter 11 Case Project 11-1
12 | 04/10-04/17 | · Chapter 12 - E-mail Investigations · Chapter 12 Case Projects 12-3 & 12-4
13 | 04/17-04/24 | · Chapter 13 - Cell Phone and Mobile Device Forensics · Chapter 13 Case Project 13-1
14 | 04/24-05/01 | · Chapter 14 - Report Writing for High-Tech Investigations · Chapter 14 Case Project 14-1
15
05/01-05/08
· Chapter 15 - Expert Testimony in High-Tech Investigations

· Case Projects 15-2 & 15-3

· Chapter 16 - Ethics for the Expert Witness

· Case Projects 16-1 & 16-3
16 | 05/08-05/13 | FINALS

The schedule and procedures in this course are subject to change in the event of extenuating circumstances.

INSTITUTIONAL POLICIES

Attendance

Students’ success in college is dependent upon full participation in class activities.  Because classroom activities are intended to help students learn, it is expected that students will attend all class meetings and activities.  Students are expected to be on time for each session and/or log in regularly, have the required textbook and materials, and make satisfactory progress in the class.  If students must be absent, they should make arrangements in advance with their instructors, if at all possible.  Students are responsible for notifying instructors of any absence.

Procedural Clarifications

  - All instructors will maintain attendance as required for reporting.  Excessive unexcused absences may result in a student being withdrawn from the course by the instructor.  Withdrawal from a course may affect a student’s financial aid.

  - For lecture/blended courses, excessive unexcused absences are defined as missing more than 20% of the courses scheduled meeting time.  Students that have missed more than 20% of the courses scheduled meeting and are not passing will be dropped by the instructor.

  - For an online student to make satisfactory progress in the course, the student must login regularly (at least twice per week) and participate in the assigned learning activities.  Students who have not logged in regularly and who are not passing will be dropped by the instructor.

  - If a student is withdrawn by the instructor a “WT” (withdrawn by teacher) will be recorded on his/her permanent record. An instructor cannot drop a student who is regularly attending for below average performance. A faculty member cannot drop a student after the published last day to drop.  Any exceptions to this policy must be approved by the Dean.  Students who want to drop the course may do so before or on the published last day to drop.

- Student absences for approved college activities will not accrue as excessive unexcused absences.  Students will be allowed to make up work missed as a result of college approved activities.  Students will make up work before the absence or within one week after returning to class.  Students will check with each of their instructors prior to the absence to arrange for makeup times.  Activity sponsors will publish a timely list of students who will be absent because of an approved college activity.

Academic Integrity

Butler Community College defines academic integrity as learning that leads to the development of knowledge and/or skills without any form of cheating or plagiarism.  This learning requires respect for Butler’s institutional values of quality, service integrity, and caring as well as its Learning College Principles.  All Butler students, faculty, staff and administrators are responsible for upholding academic integrity.

Cheating is giving, receiving or using unauthorized help on individual and group academic exercises such as papers, quizzes, tests, and presentations through any delivery system in any learning environment.  This includes impersonating another student, sharing content without authorization, fabricating data, and altering academic documents, including records, with or without the use of personal and college electronic devices.

Plagiarism is representing or turning in someone else’s work without proper citation of the source. This includes unacknowledged paraphrase, quotation, or complete use of someone else’s work in any form. It also includes citing work that is not used and taking credit for a group project without contributing to it.

Faculty members have discretion in handling student violations of the academic integrity policy, but faculty members must consult with their deans or administrators.  Faculty members must inform students of violations and their consequences in writing.  Students who violate the academic integrity policy will sustain academic consequences set by faculty members, which may include, but are not limited to:

- A warning
- A zero or failing grade on the academic exercise with repetition of the exercise allowed for reduced or the same amount of original credit
- A zero or failing grade on the exercise with no repetition allowed
- A failing grade in the course and removal from it

Students who violate the academic integrity policy are also subject to administrative consequences, which may include, but are not limited to:

1. Reprimand
2. Probation
3. Being barred from the course and/or program
4. Reduction or cancellation of a college scholarship
5. Suspension from college activities
6. Suspension from the college for a set time
7. Expulsion from the college

Students will be informed of administrative consequences in writing.

Students who have been accused of academic integrity violations may follow the Academic Appeals process listed under Student Grievance Procedures.  This process assures due process and procedure.  Generally, if dissatisfied with the consequences set by faculty members, students may appeal in writing to appropriate deans or administrators.  If dissatisfied with the dean’s or administrator’s decision, students may appeal to the Student Review and Appeals Committee, which consists of student and faculty representatives and the Vice President for Student Services.  If dissatisfied with the Student Review and Appeals Committee’s decision, students may appeal to the Vice President for Academic Affairs, whose decision is final.  Students will be notified of appeal results in writing.

Incompletes

If a student who has been making a passing grade cannot complete the work in a course due to illness (or other sufficient reason), an instructor, at his/her discretion, may enter an "I" temporarily on the student's record at the end of the term when the final grade roster is submitted.  It is the student's responsibility to initiate the verbal or written contract with the instructor. The "I" will change to an "F" if the work is not completed within the first 6 weeks of the following semester (excluding summer), unless an extension of time is granted by the agreement of the appropriate dean and the instructor of the course.  The student is entirely responsible for completing the work which will remove the "I."

Disability Services Statement

Anyone needing information concerning special needs should contact your instructor after class or the Disability Services Coordinator, at xxxxxxx.

Social Media Policy

Butler Community College supports the use of technology inside and outside the classroom.  This support includes the use of social media communication formats such as Facebook and Twitter.  This support comes with the expectation that students in Butler programs will uphold the ethical standards of their prospective professions and the Butler Community College Student Code of Conduct. Federal regulations regarding privacy such as Health Insurance Portability and Accountability Act and Family Education Rights and Privacy Act (HIPAA and FERPA) apply to all personal and academic communication.  Student use of photography and/or recording devices is prohibited in all clinical, laboratory, studio and performance sites, unless formal permission of the instructor of record is granted before the fact.

It is the expectation that students have read and understand the Student Code of Conduct and Federal regulations related to privacy (HIPAA and FERPA).  Noncompliance with this policy will result in disciplinary action which may include failure of a course, probation, suspension and/or dismissal from the program.

INSTRUCTOR POLICIES

Attendance

Attendance and networking is important to the learning environment, therefore you are asked to attend every class.  If you cannot attend a class, it is your responsibility to inform the instructor via email before class if possible.

Class is in session for three hours.  You are expected to attend the entire class session.  Please make your various appointments at times that do not conflict with your class schedule.

Late/Make-up Assignments

Late assignments will not be accepted unless the deadline is missed due to extenuating circumstances.  Acceptance of late assignments is at the discretion of the instructor.

MSAT's are a requirement of the class.  Failure to complete the MSAT will result in a failing grade for the class.

Drop

Instructor drops will not be made unless governed by academic policies as outlined in the Schools Institutional Policy.  You are responsible to drop the class if you choose to no longer participate.

Excessive absences combined with poor work performance (incomplete homework assignments) will be considered for instructor drop.

Food

Food or drink will not be allowed in the classroom.  Sealed bottles will be allowed but must remain closed and away from computers.

Academic Integrity

There are many opportunities for the student to abuse the learning opportunities in the technology classes.  Testout, for example allows multiple attempts when completing labs and exams.  These are designed as learning tools and should not be abused.  Apparent and obvious abuses of the exams may bring academic sanctions against the student.  Cheating will not be tolerated and does nothing to advance your future career in the technology industry.  Violators will be dealt with according to school policy.

DEPARTMENTAL POLICIES

Policy