Home‎ > ‎

CIS 77

Computer Forensics Fundamentals

 Time Tuesdays 11:00am to 2:05pm
 Room 829 Aptos Main Campus
 Live Online
 Roll Call
 Lab Open Lab - 2 hours 5 minutes per week TBA
 Units 3
 Transfers CSU
 Prerequisites  CIS 75
 Book Guide to Computer Forensics and Investigations (+ Lab Manual)
 Status Version 1: Alpha 
 Calendar, assignments subject to change
 Links Canvas

Course Calendar

January 24, 2017 Welcome Chapter 1  
January 31, 2017 Introduction to Forensics Tools and Procedures Chapter 1 Lab 1: Get Ready 
February 7, 2017 The Investigator's Lab Chapter 2 Lab Manual 1 
February 14, 2017 Data Acquisition Chapter 3 Lab Manual 2 
February 21, 2017 Data Acquisition Chapter 3 Lab: Working with Images 
February 28, 2017 Working With Windows Chapter 5 Lab: Hash Sets 
March 7, 2017 Working With Windows Chapter 5 Nelab: Lab 3 
March 14, 2017 Working with the Windows Registry Chapter 5  
March 21, 2017 Spring Break   
March 28, 2017 Midterm Chapter 5 Lab: Forensic Imaging and Registry 
April 4, 2017 Working with Linux/OSX Chapter 7  
April 11, 2017 Working with Linux/OSX Chapter 7 Linux Forensics: Triage 
April 18, 2017 Image Processing Chapter 8 Busting BitLocker 
April 25, 2017 Memory Forensics Chapter 8  
May 2, 2017 Email and Social Media Investigations Chapter 11 Lab: Memory Forensics 
May 9, 2017 Report Writing Chapter 14  
May 16, 2017 Final   
Showing 17 items from page Calendar sorted by Date. View more »

Video Archives

Course Description

Introduces the methods used to properly conduct a computer forensics investigation beginning with a discussion of ethics, while mapping to the objectives of the International Association of Computer Investigative Specialists (IACIS) certification. Introduces computer forensics as a profession; the computer investigation process; understanding operating systems, boot processes and disk structures; data acquisition and analysis; technical writing; and familiar computer forensics tools. May be offered in a Distance-Learning Format. 

Student Learner Outcomes

  1. Compare and contrast computer forensics tools.
  2. Create a forensic report.


  1. Define computer forensics.
  2. Summarize how to prepare for a computer investigation.
  3. Summarize the certification requirements for computer forensics labs.
  4. Measure the different ways for proper data acquisition.
  5. Classify the rules for proper digital evidence handling.
  6. Analyze how data is stored and managed by an operating system.
  7. Analyze various computer forensics tools.
  8. Validate the evidence during the analysis process.
  9. Identify and reconstruct graphics files.
  10. Describe the importance of network forensics.
  11. Analyze email investigations.
  12. Generate a forensic report.
  13. Describe guidelines for testifying in court.

Grading Policy

  • 60% Labs
  • 20% Midterm
  • 20% Final

TBA (To Be Arranged) Lab Hours

This course meets weekly at the times shown in the Cabrillo Schedule of Classes and above. In addition each student is required to spend lab time every week in either the CIS Lab (room 830) or online using the CIS VLab. Students may choose the time and day for their TBA Lab Hours where they will work on lab assignments designed to give them practical hands-on experience and continue the learning process. These TBA lab hours are required, tracked, and graded. It is the student’s responsibility to complete the TBA lab hours, which start on Week 1 of the term, and record their attendance. Tip: A great time to do TBA lab hours is in the CIS Lab when the instructor is there. If that is not possible, questions can always be posted on the electronic help forum which is monitored by the instructor.

Late Work Will Not Be Accepted

Homework is due before class on the calendar date where the homework is listed. Please complete all assignments on time as they will not be accepted if they are late. This will help both the student and instructor keep the class moving and avoid log jams at the end of the term. If an assignment is not complete by the deadline it is better to make an incomplete submission for partial credit than no submission at all. There may be extra credit work for students needing extra points.

Classroom Etiquette

It is important to have an effective, distraction-free classroom environment for learning. To minimize distractions all cell-phones should be turned off or at least silenced. Never carry on conversations during the lecture as this is probably the most annoying distraction possible to those sitting nearby.

For students in the physical classroom, computers can be turned on for viewing lecture slides locally, Google-ing related technical information, and doing classroom exercises. A student's full attention is desired so the computers should not be used during lecture for email or anything that would distract them or others from the material being taught.

For students in the virtual classroom, use the "Raise hand" icon in CCC Confer to let the instructor know you have a question. The chat window can be used to ask questions and communicate with the instructor or other classmates. For students dialing in please use *6 on your phone to mute/unmute your line so background noises in your location don't distract the class.

Please plan on coming to all classes. If class will be missed let the instructor know ahead of time. It is the student's responsibility to get any missed material or information from other classmates (the forum is a good way to do this). Please note that being disruptive is grounds for being dropped from the class by the instructor.

Academic Conduct

Instructors at Cabrillo will not tolerate any forms of academic dishonesty. We do not accept remarkably similar assignments. Students who engage in violations of academic integrity (cheating, plagiarizing print or electronic sources, copying computer files, web site content) as outlined in Cabrillo's "Student Rights and Responsibilities" document are subject to disciplinary action by the instructor including receiving an "F" for the assignment, being dropped from the course with a "W" or being issued an "F" for the course.

Special Learning Needs

Veterans or students with disabilities, including "invisible" disabilities such as chronic diseases, learning, and psychological disabilities, are encouraged to explain their needs and appropriate accommodations to the instructor during office hours. Please bring a verification of your disability from the Learning Skills or DSPS offices and a counselor or specialist's recommendations for accommodating your needs.

As required by the Americans with Disabilities Act (ADA), accommodations are provided to insure equal opportunity for students with verified disabilities. If you need assistance with an accommodation, please contact the Learning Skills Program at 831-479-6220 (for students with learning disabilities and attention deficit disorders) or Disabled Student Programs and Services (DSPS) at 831-479-6379 or 831-479-6421 (TTY) to make arrangements as soon as possible.

Students interested in receiving accommodations and services can contact the ASC at (831) 479-6379 to schedule an appointment to meet with one of the ASC counselors. Please arrive 15 minutes prior to the scheduled appointment to fill out necessary paperwork.

ASC is located outside Room 1073 in The Hub, upstairs behind the library.

Missing Classes and Drops

It is the student's responsibility to officially withdraw from classes. If you miss more than two classes or two lab assignments, the instructor may drop you from the course enrollment unless prior arrangements have been made and agreed to.