Winter 2010
3:30p - 4:45p Tuesday, Thursday
W328 TNRB
Anthony Vance, PhD
Office: 779 TNRB
Email: anthony@vance.name
Web: http://anthonyvance.com
Upon successful completion of this course, students will develop abilities to:
1. Determine whether organizational processes for the collection, preservation, presentation and preparation of computer-based evidence are appropriate for satisfying the requirements of criminal law enforcement and civil litigation. 2. Assist in the formulation and implementation of organizational computer forensics preparedness policies. 3. Determine the necessity for forensic preparedness procedures and recognize the appropriate moments for instigating an investigation and involving law enforcement. 4. Contribute as a member of a computer forensics investigation team. 5. Recognize typical forms of computer crime and abuse and the relevant evidence. 6. Assist in determining where and how evidence may be stored in computers, and how this evidence may be extracted without contamination. 7. Participate in the selection of appropriate tools for forensic investigation. 8. Prepare forensic evidence for delivery in adversarial settings.