Measurable Student Learning Outcomes
1. (Comprehension Level) Review and explain rules of evidence, as related to: seizure or acquisition of media, handling, marking and storage of electronic evidence, appropriate chain of custody, and right to privacy. (CSLO 2)
2. (Synthesis Level) Develop various recovery strategies for different types of computer investigations. (CSLO 3).
3. (Application Level) Use computer forensic tools and manual techniques to retrieve data. (CSLO 3)
4. (Analysis Level) Apply various data recovery protocols on MS Windows, DOS, Macintosh, Unix, and Linux operating systems. (CSLO 3)
5. (Analysis Level) Differentiate between the recovery of images and data. (CSLO 2)
6. (Synthesis Level) Create and implement a network forensic plan. (CSLO 4)
7. (Synthesis Level) Create forensic investigation plans and demonstrate e-mail, social media, and cloud investigation techniques, per given case studies. (CSLO 4)
8. (Comprehension Level) Explain how to approach investigating social media communications. (CSLO 2)
9. (Comprehension Level) Explain standard procedures for conducting forensic analysis of virtual machines. (CSLO 2)