Introduction to Digital Forensics

Course number: 
CIS 3605
Fall 2015
Name E-mail Office location
Cindy Li (Xiuqi Li)
Science Education and Research Center (SERC), Room 353
( CIS 2107 | Minimum Grade of C- | May not be taken concurrently.  )
( CIS 2229 | Minimum Grade of C- | May not be taken concurrently.  )
AND ( CIS 2168 | Minimum Grade of C- | May not be taken concurrently. )

The textbook and course resources are determined by the individual instructor.

Topics covered: 
  • Fundamentals for digital forensics investigation
  • Foundations of electronic evidence - compliance and requirements
  • Cyber crime laws
  • Digital Forensics Process 
  • Fundamentals of file systems
  • Forensics File recovery and file carving
  • Forensics artifacts relevant to Windows Systems and Networks
  • Using open source forensics tools
Course goals: 
  • Ability to formulate and implement organizational digital forensics policies
  • Ability to determine the necessity for forensic procedures
  • Clear understanding of the various stages in a digital forensics investigation
  • Clear understanding of laws relevant to digital forensics investigation
  • Knowledge of storage management and its importance in forensics
  • Knowledge of le system fundamentals and detailed understanding of FAT le systems
  • Ability to use open source forensics tools to recover and carve les
  • Ability to identify and justify artifacts relevant to Windows Systems and Networks
  • Understanding of Antiforensics and its impact on Digital Forensics Analysis
Attendance policy: 
Attendance to all meetings of the class is mandatory
Accomodations for Students with Disabilities: 
Any student who has a need for accommodation based on the impact of a documented disability, including special accommodations for access to technology resources and electronic instructional materials required for the course, should contact me privately to discuss the specific situation by the end of the second week of classes or as soon as practical. If you have not done so already, please contact Disability Resources and Services (DRS) at 215-204-1280 in 100 Ritter Annex to learn more about the resources available to you. I will work with DRS to coordinate reasonable accommodations for all students with documented disabilities. (
Student and Faculty Academic Rights and Responsibilities: 
Freedom to teach and freedom to learn are inseparable facets of academic freedom. The University has a policy on Student and Faculty and Academic Rights and Responsibilities (Policy #03.70.02) which can be accessed through the following