Computer Forensics

Copyright Priscilla Oppenheimer

Course Objectives

Upon successful completion of this course you should be able to:


Scene of the Cybercrime, by Debra Littlejohn Shinder.


Week 1 Introduction to Computer Forensics Chapter 1
Week 2 Computer Crimes and Criminals Chapter 3
Week 3 Collecting and Preserving Digital Evidence Chapter 10
Week 4 Building a Cybercrime Case Chapter 11
Week 5 Computer Hardware Chapter 4
Week 6 Computer Software Chapter 4
Week 7 Preserving and Recovering Digital Evidence Chapter 10
Week 8 Introduction to Networking Chapter 5
Week 9 History and Future of Cybercrime Chapter 2
Week 10 Special Topics TBA



We will do a lab once a week. Labs will range from simple (opening up a computer and listing what's inside) to complex, where we use the WinHex software to recover digital evidence. We will do a "lockdown lab," where the student will be required to seize a computer from a "crime scene," while obeying all laws and policies and without damaging the computer. Other ideas for labs involve wireless war driving and investigating the true source of a phishing scam.

Lab 1 Sketch the guts of a computer
Lab 2 Investigate Modify Access Create file behavior
Lab 3 Make evidence tags and logs
Lab 4 Seize a computer (lockdown lab)
Lab 5 Cloning a Disk with WinHex
Lab 6 Recovering Digital Evidence with WinHex
Lab 7 Analyzing Digital Evidence with WinHex
Lab 8 Documenting Digital Evidence with WinHex
Lab 9 Analyzing a Phishing Scheme
Lab 10 Something fun TBA


Some Slides


Interesting Links:

Citibank Phishing Example

Fifth Third Bank Phishing Example

Computer Forensics Jeopardy

Computer Technology Investigators Northwest


Internet Crime Complaint Center


The PC Guide