Page |1

BAKHTAR UNIVERSITY COURSE OUTLINE PREPARED BY:

ISLAHUDDIN JALAL
COURSE TITLE: MS-CF Computer Forensics

Credit Hours: 3 (Theory) + 0 (Lab)

Pre-requisites: CSC341 NETWORK Security

COURSE OBJECTIVES:

In this course, students will correctly define and cite appropriate instances for the
application of computer forensics and the students will also understand the correct
and up-to-date format for the collection and gathering of computer forensics
evidence and will know how to analyse collected and gathered data. This course will
also provide basic and up-to-date concepts, algorithms, protocols, tools and
methodology of the computer forensics.

CLASS POLICY:

A student must reach the class-room in time. Late comers may join the class
but are not entitled to be marked present.
Attendance shall be marked at the start of the class and students failing to
secure 75% attendance will not be allowed to sit in final exam.
The assignment submission deadline must be observed. In case of late
submission, ten percent may be deducted from each day.
Those who are absent on the announcement date of the assignment/test.
Must get the topic/chapter of test/assignment confirmed through their peers.
Mobile phones must be switched-off in the class-rooms.

GRADING POLICY:

Internal Evaluation
Midterm Exam 20%
Attendance 5%
Assignment/Presentations 5%
Quizzes/Tests 10%
Total Internal Evaluation 40%
Final-term Examination
Final-term Exam 60%
Total Marks 100%
Computer Forensics JumpStart Second Edition Michael G. Solomon K Rudolph Ed Tittel Neil Broom

Diane Barrett

Ten Tips for Success

 Page |2

BAKHTAR UNIVERSITY COURSE OUTLINE PREPARED BY:

ISLAHUDDIN JALAL
1. Come to class and arrive on time
2. Actively participate in class discussion and activities
3. Do the assigned reading (when it is assigned)

4. Do the assigned homework (when it is assigned)

5. Review your notes/assignments daily
6. Ask questions when you are unsure of something
7. Ask questions when you would like to know more about something
8. Accept points of view that are different from your own
9. Respect other members of your class
10. Come see me as soon as you have difficulty with any of the material that we
cover in class do not wait until it is too late!

COURSE DESCRIPTION:

WEEK TOPICS COVERD ASSESSMENT

NO
1 Overview of Computer Forensics
Computer forensics
Evolution, objective, benefits of CF
Forensics Readiness Planning
Cybercrime and its types
Cybercrime investigation
2 Continued Assignment
Key Steps in Forensics Investigation
Roles of Forensics investigator
Accessing Computer forensics
Resources
Role of Digital Evidence
Understanding Corporate
Investigation
Legal Issues
Reporting the Result
3 CF Investigation Process Quiz 1 and 2 week
Investigating Computer Crime
Before the Investigation
Computer Forensic Investigation
Methodology
Evaluate and Secure the Scene
Collect the Evidence

4 Continued.
 Page |3

BAKHTAR UNIVERSITY COURSE OUTLINE PREPARED BY:

ISLAHUDDIN JALAL
Secure the Evidence
Acquire and Analyze the Data
Assess Evidence and Case
Prepare the Final Report
Testify in the court as an Expert
witness
Computer Forensics Service
Providers
5 Searching and Seizing Computers Assignment 3, 4 and 5
Searching and Seizing Computers week
without warrant
The Fourth Amendments
(Reasonable Expectation of Privacy)
Consent
Private Sector Workplace Searches
Searching and Seizing Computers
with a warrant
Basic strategies for executing
Computer Searches
The Privacy Protection Act
6 Continued..
Drafting the Warrant and Affidavit
Post-Seizure Issues
The Electronic Communications
Privacy Act
Voluntary Disclosure
Electronic Surveillance in
Communications Networks
Content VS. Addressing Information
Evidence
Authentication
7 Digital Evidence Quiz 3 to 6 week
The Definition of Digital Evidence
The Role of Digital Evidence
Characteristics of Digital Evidence
Types of Digital Data
Best Evidence Rule
Federal Rules of Evidence
International Principles for
computer Evidence
The Scientific Working Group on
Digital Evidence
8 Continued.
Electronic Devices: Types and
Collecting Potential Evidence
Digital Evidence Examination
 Page |4

BAKHTAR UNIVERSITY COURSE OUTLINE PREPARED BY:

ISLAHUDDIN JALAL
process
Evidence Assessment
Evidence Acquisition
Evidence Preservation
Evidence Examination and Analysis
Evidence Documentation and
Reporting
Electronic Crime and Digital
Evidence Consideration by Crime
Category
9 Midterm Exam Week 1 Week 8
10 First Responder Procedures
Electronic Evidence
First Responder
First Responder Toolkit
First Responder Basics
First Response by Laboratory
Forensic Staff
Securing and Evaluating Electronic
Crime scene
11 Continued. Assignment 6 to 10
Conducting Preliminary Interviews week
Documenting Electronic Crime
Scene
Collecting and Preserving Electronic
Evidence
Packaging and Transporting
Electronic Evidence
Reporting the Crime Scene
Note Taking Checklist
First Responder Common Mistakes
12 Computer Forensics Lab Quiz 7 to 11 week
Computer Forensics Lab
Investigative Services in Computer
Forensics
Basic Hardware Requirements in a
Forensics Lab
Paraben Forensics Hardware
Portable Forensics systems and
towers
Tableau Forensics Hardware
Digital Intelligence Forensics
Hardware
Wiebetec Forensics Hardware
13 Continued.
CelleBrite Forensics Hardware
 Page |5

BAKHTAR UNIVERSITY COURSE OUTLINE PREPARED BY:

ISLAHUDDIN JALAL
DeepSpar Forensics Hardware
Many more Hardware
Basic Software Requirements in a
Forensics Lab
Computer Forensics Software
14 Understanding Hard Disks and File Assignment 11 to 14
Systems week
Hard Disk Drive (HDD)
Solid State Drive (SSD)
Physical and logical Structure of a
HD
Disk Partitions
Different Windows Boot process
Different File systems
File system analysis Using The
Sleuth Kit
15 Windows Forensics and Mobile Quiz 12 to 14 week
Forensics
16 Data Recovery and Analysis
File Header and File Metadata
Understanding file structure
File Carving
Logical Recovery
Physical Recovery
17 Tracking email and Investigation
18 Investigative Reports 10 to 17 week
Final-term Exam

___________________________ _____________________________________
Instructor Head
of Computer Science Department

Note:

1. Assignments/Quizzes should be taken in time.

 Page |6

BAKHTAR UNIVERSITY COURSE OUTLINE PREPARED BY:

ISLAHUDDIN JALAL
2. Student who is not satisfactory must be addressed to HoD.
3. Course outline must be observed.