Course Outlines

FSCT 8513 Digital Forensics 1

School	School of Computing and Academic Studies
Program	Digital Forensics & Cybersecurity Option
Course Credits	3
Minimum Passing Grade	60%
Start Date	January 08, 2021
End Date	April 02, 2021
Total Hours	45
Total Weeks	13
Hours/Weeks	3.46
Delivery Type	Lecture/Lab
Pre-requisites	FSCT 7509 and FSCT 7510
CRN	86219

Acknowledgement of Territories

The British Columbia Institute of Technology acknowledges that our campuses are located on the unceded traditional territories of the Coast Salish Nations of Sḵwx̱wú7mesh (Squamish), səl̓ilwətaɁɬ (Tsleil-Waututh), and xwməθkwəy̓əm (Musqueam).

Instructor Details

Name	Ilia Lvovski
E-mail	Instructor to provide
Location	Online
Office Hours	Instructor to provide

Course Description

Students will learn how to identify, collect, and preserve digital evidence with an emphasis on evidence collected from the Windows operating system. Topics include fundamental computer forensics principles, information extraction, legal issues, and challenges posed by variations in both data sources and devices. Students will use specialized forensic software to collect and use evidence in a forensically sound manner, to support an investigation. ​

Course Learning Outcomes/Competencies

Upon successful completion of this course, the student will be able to:

• Outline fundamental principles of computer forensics.
• Preserve digital evidence.
• Extract data from computers running the Windows operating system.
• Use forensic software and techniques to analyse digital evidence.
• Locate and identify required evidence in different investigative scenarios.
• Assess legal issues around evidence collection, presentation and jurisdiction.

Learning Resources

N/A

Evaluation Criteria

Criteria	%	Comments
Midterm	35
Quizzes	25
Final	40

Other information

Students will learn how to identify, collect, and preserve digital evidence with an emphasis on evidence collected from the Windows operating system. Topics include fundamental computer forensics principles, information extraction, legal issues, and challenges posed by variations in both data sources and devices. Students will use specialized forensic software to collect and use evidence in a forensically sound manner, to support an investigation.

Course topics

• Identify, collect and analyze digital forensic evidence.
• Triage forensic data
• Perform initial analysis of windows registry.
• Use a number of specialized forensic tools to conduct a forensic analysis
• Apply legal principles correctly in complex digital investigations
• Describe computer forensic process and incident response procedures

BCIT Policy

Any student who needs special assistance in the event of a medical emergency or building evacuation (either because of a disability or for any other reason) should promptly inform their course instructor(s) and Accessibility Services of their personal circumstances.

Human Rights, Harassment and Discrimination:
The BCIT community is made up of individuals from every ability, background, experience and identity, each contributing uniquely to the richness and diversity of the BCIT community as a whole. In recognition of this, and the intrinsic value of our diversity, BCIT seeks to foster a climate of collaboration, understanding and mutual respect between all members of the community and ensure an inclusive accessible working and learning environment where everyone can succeed.

Respect, Diversity, and Inclusion is a supportive resource for both students and employees of BCIT, to foster a respectful learning and working environment. Any student who feels that they are experiencing discrimination or harassment (personal or human rights-related) can confidentially access this resource for advice and support. Please see Policy 7507 – Harassment and Discrimination and accompanying procedure.

Students should make themselves aware of additional Education, Administration, Safety and other BCIT policies listed at https://www.bcit.ca/about/administration/policies.shtml

Guidelines for School of Computing and Academic Studies

Attempts:
Students must successfully complete a course within a maximum of three (3) attempts at the course. Students with two attempts in a single course will be allowed to repeat the course only upon special written permission from the Associate Dean. Students who have not successfully completed a course within three attempts will not be eligible to graduate from their respective program.

Approved

I verify that the content of this course outline is current.
Ilia Lvovski, Instructor
December 13, 2020

I verify that this course outline has been reviewed.
David McKay, FSA PTS Administration-122120
December 14, 2020

I verify that this course outline has been reviewed and complies with BCIT policy.
Jennifer Talman, Associate Dean
December 14, 2020