Southern Oregon University

Computer Forensics CS/CCJ 346

Course Objectives

Upon successful completion of this course you should be able to:

Text

Scene of the Cybercrime, by Debra Littlejohn Shinder.

Instructor

Priscilla Oppenheimer

e-mail: oppenhep at sou.edu

Phone: 552-8168

Office: CS Room 219

Topics

Week 1 Introduction to Computer Forensics Chapter 1
Week 2 Computer Crimes and Criminals Chapter 3
Week 3 Collecting and Preserving Digital Evidence Chapter 10
Week 4 Building a Cybercrime Case Chapter 11
Week 5 Computer Hardware Chapter 4
Week 6 Computer Software Chapter 4
Week 7 Preserving and Recovering Digital Evidence Chapter 10
Week 8 Introduction to Networking Chapter 5
Week 9 History and Future of Cybercrime Chapter 2
Week 10 Special Topics TBA

Homework

Labs

We will do a lab once a week. Labs will range from simple (opening up a computer and listing what's inside) to complex, where we use the WinHex software to recover digital evidence. We will do a "lockdown lab," where the student will be required to seize a computer from a "crime scene," while obeying all laws and policies and without damaging the computer. Other ideas for labs involve wireless war driving and investigating the true source of a phishing scam.

Lab 1 Sketch the guts of a computer
Lab 2 Investigate Modify Access Create file behavior
Lab 3 Make evidence tags and logs
Lab 4 Seize a computer (lockdown lab)
Lab 5 Cloning a Disk with WinHex
Lab 6 Recovering Digital Evidence with WinHex
Lab 7 Analyzing Digital Evidence with WinHex
Lab 8 Documenting Digital Evidence with WinHex
Lab 9 Analyzing a Phishing Scheme
Lab 10 Something fun TBA

 

Interesting Links:

Citibank Phishing Example

Fifth Third Bank Phishing Example

Computer Forensics Jeopardy

Computer Technology Investigators Northwest

C.R.I.M.E. Computer Related Investigations Management Education

CyberCrime.gov

FindLaw

Internet Crime Complaint Center

SecurityFocus

The PC Guide