CGS 5131: Computer Forensics I

Instructor: Dr. S. Lang Harris Eng Center 207 (407) 823-2474 lang@cs.ucf.edu Office Hours: Monday & Wednesday: 2 - 4 pm	Teaching Assistant: Richard Bares ri061289@pegasus.cc.ucf.edu

Announcements:
(Oct. 26, 2007) Lecture narratives for Oct. 23's class posted. (Oct. 25, 2007) Attention, online students: If you have not posted the original postings to each of the two topics of Discussion Assignment #4, then you have missed more than half of the grades for this (Discussion) Assignment. Please read the assignment's instructions carefully, and be responsive. Lab Assignment #4 revised with Question 3 added. (Oct. 22, 2007) Guest lecture's presentation slides, WebEx movie player installation file, and 6 movie files accompanying the presentation, are posted. (Oct. 19, 2007) There will be a guest lecture on "Analysis of Windows Executable files" to be presented by Mr. Gregory Leibolt, an experienced security officer, incident response team leader, computer forensics investigator, with over ten years of corporate experience. His presentation slides including movie files of demonstrations will be posted soon. (Oct. 19, 2007) Pages 4 and 5 of Lab Assignment #4 revised. (Oct. 18, 2007) Question 1(i) of Lab Assignment #4 revised. Lecture narratives for Oct. 16's class posted. (Oct. 16, 2007) Sergeant Stenger's presentation slides posted under Notes. Lab Assignment #4 and Discussion Assignment #4 posted. (Oct. 16, 2007) Sergeant Stenger of Orange County Sheriff's Office, Computer Crimes Squad, will be today's guest speaker to talk about computer forensics, cybercrime investigation, from law enforcement perspective. Test #1 questions and answers available on WebCT until Oct. 23, 2007. There are 5 bonus points for Test #1 (i.e., add 5 points to your Test #1 score.) (Oct. 10, 2007) Lecture narratives for Oct. 9's class posted. (Oct. 9, 2007) Sergeant Stenger of Orange County Sheriff's Office, Computer Crimes Squad, will be the guest speaker for Oct. 16's class. (Oct. 9, 2007) Notes on NTFS (File System Analysis) and String Searches posted. (Oct. 7, 2007) Test #1 is posted, and must be COMPLETED by 10 pm on Friday, Oct. 12, 2007. Lab Assignment #2 grades and an answer key posted (in Discussion Groups). (October 3, 2007) Test #1 information posted. (October 2, 2007) Lab Assignment #3 updated with added information. The new due date is Thursday, Oct. 11. Diskedit tutorial under Notes has been expanded to include more examples relevant to Lab Assignment #3, including how to copy and export files (sectors) to a spare floppy disk. Notes on AccessData's FTK posted. (September 29, 2007) A tutorial on DOS commands, courtesy of Richard Bares, posted in the Notes section. (September 26, 2007) Useful information (known issues and answers) for Lab Assignment #2 posted under the discussion group topic "Lab Assignment #2." (September 25, 2007) Lab Assignment #3 and Notes on NTFS revised and reposted. Discussion Assignment #3 and lecture narratives posted. (September 25, 2007) Lab Assignment #2's due date extended to 9/29/2007. More details (and help) on the assignment are coming soon. (September 24, 2007) Lab Assignment #3 and an updated Diskedit Tutorial (under Notes) posted. (September 20, 2007) A new discussion group "Lab Assignment #2" is created. The purpose of this group is for posting questions and comments reagrding the assignment. The instructor has posted the first message explaining how to run the mmls command. (September 20, 2007) Question 1(b) of Lab Assignment #2 revised. A new discussion group on Lab Assignment #2 is created. The purpose of this group is for people to post questions and comments reagrding the assignment. The instructor has posted the first message explaining the mmls command. (September 18, 2007) Notes on Diskedit tutorial and NTFS posted. (September 11, 2007) Notes on Windows file systems posted. (September 10, 2007) Lab Assignment #2 posted. (September 6, 2007) Discussion Assignment #2 posted. (September 5, 2007) Questions 1 and 3 of Lab Assignment #1 slightly revised. (September 4, 2007) New notes and information of the TA, and lecture narratives, posted. (Aug. 28, 2007) New notes and Lab Assignment #1 posted; Discussion Assignment #1's due date and requirements revised. (Aug. 21, 2007) Lecture narratives for today's class posted on WebCT. (Aug. 20, 2007) The face-to-face class meets at 6 pm on Tuesday, August 21, in Rm. 102 of the NCFS Building. Directions to the building can be found at http://www.ncfs.org/directions.html. Notes and Discussion Assignment #1 are posted.