Upon successful completion of this course you should be able to:
Scene of the Cybercrime, by Debra Littlejohn Shinder.
| Week 1 | Introduction to Computer Forensics | Chapter 1 |
| Week 2 | Computer Crimes and Criminals | Chapter 3 |
| Week 3 | Collecting and Preserving Digital Evidence | Chapter 10 |
| Week 4 | Building a Cybercrime Case | Chapter 11 |
| Week 5 | Computer Hardware | Chapter 4 |
| Week 6 | Computer Software | Chapter 4 |
| Week 7 | Preserving and Recovering Digital Evidence | Chapter 10 |
| Week 8 | Introduction to Networking | Chapter 5 |
| Week 9 | History and Future of Cybercrime | Chapter 2 |
| Week 10 | Special Topics | TBA |
We will do a lab once a week. Labs will range from simple (opening up a computer and listing what's inside) to complex, where we use the WinHex software to recover digital evidence. We will do a "lockdown lab," where the student will be required to seize a computer from a "crime scene," while obeying all laws and policies and without damaging the computer. Other ideas for labs involve wireless war driving and investigating the true source of a phishing scam.
| Lab 1 | Sketch the guts of a computer |
| Lab 2 | Investigate Modify Access Create file behavior |
| Lab 3 | Make evidence tags and logs |
| Lab 4 | Seize a computer (lockdown lab) |
| Lab 5 | Cloning a Disk with WinHex |
| Lab 6 | Recovering Digital Evidence with WinHex |
| Lab 7 | Analyzing Digital Evidence with WinHex |
| Lab 8 | Documenting Digital Evidence with WinHex |
| Lab 9 | Analyzing a Phishing Scheme |
| Lab 10 | Something fun TBA |
Fifth Third Bank Phishing Example
Computer Technology Investigators Northwest