4 credits cyber-elective CAE-CD; CAE-CO

CSCD 436 — Digital Forensics

Introduction to digital forensic investigation. Topics include evidence collection and preservation, chain of custody, file-system and disk analysis, memory analysis, network forensics, and legal considerations.

catalog.ewu.edu

DCWF work roles this course develops

CS-212 Cyber Defense Forensics Analyst primary
Cyber Defense Forensics Analyst.
EN-211 Forensics Analyst primary
Forensics Analyst.
CS-531 Cyber Defense Incident Responder strong
Incident Responder: forensic analysis during IR.

Knowledge Units covered

CD-DFS Digital Forensics primary
Digital Forensics.
CD-HOF Host Forensics strong
Host Forensics.
CD-NWF Network Forensics strong
Network Forensics.

ABET student outcomes

Student outcomes defined by the ABET Computing Accreditation Commission. Outcome 7 applies to cybersecurity-designated programs.

ABET 1 strong Analyze a complex computing problem and apply principles of computing and other relevant disciplines to identify solutions.
ABET 4 strong Recognize professional responsibilities and make informed judgments in computing practice based on legal and ethical principles.
Legal / chain of custody.
ABET 7 strong Apply security principles and practices to maintain operations in the presence of risks and threats. (Cybersecurity / Cyber Operations only.)

O*NET civilian tasks prepared

Tasks drawn from the O*NET records for the occupations that most directly correspond to the DCWF roles this course develops.

SOC 15-1212.00: Monitor use of data files and regulate access to safeguard information in computer files.
SOC 15-1212.00: Document computer security and emergency measures policies, procedures, and tests.
SOC 15-1212.00: Monitor current reports of computer viruses to determine when to update virus protection systems.
SOC 15-1212.00: Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.